Overview

overview

10

Static

static

10

1488-8-0x0...ry.exe

windows7-x64

1488-8-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1488-8-0x00000000010C0000-0x0000000001ACD000-memory.dmp

  • Size

    10.1MB

  • MD5

    c1c5400bc4f1a56ae64b73553792b835

  • SHA1

    c99fab5bc14f1daceb14905cdd8ff88f65477cfd

  • SHA256

    af7bb6ac90b2eed2fbcdffff94ee7ead3e574325af49bf3a7ffa4d9c20256a70

  • SHA512

    d2b47511510efe8c057f1bdbf74f44508d7de8adaeebb782c006289edc96573618864514a98dc6424cb0bef4f1b820d3a7f99ea8e1058aa5d1ac1d6299b1f924

  • SSDEEP

    196608:IWtwHWttsRfpYzd/n5+gG1ALKn6yfRy/:I3Nfb6hy

Score
10/10
themidavidar

Malware Config

Signatures

  • Vidar family
    vidar
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1488-8-0x00000000010C0000-0x0000000001ACD000-memory.dmp
    .exe windows x86


    Headers

    Sections