General

  • Target

    1940-1007-0x00000000010A0000-0x0000000001120000-memory.dmp

  • Size

    512KB

  • MD5

    0f0472b79abcb02cbdbb50b6f82c5f14

  • SHA1

    988bbd32422070305219dc897e0f49971a5673ce

  • SHA256

    16b45ba81cb417849c2c45574fedf157b1388163839bb4337c4213455b9de14b

  • SHA512

    45093c13f9dba75991b0dfc673fd60e1c1dd84ec10274355b319cf02d5009b8bb716cca221d5fda7dba135a9fbbbd50ebd2c0283e364fad922ed9a12007147b6

  • SSDEEP

    6144:NBA0i2uim7rAPtf9w8zSRWBt9JPpr+hTdWzYvRh6p/J7u1xZ29mjXpXbMj:NG0iwj9w8zS4BPJPpr+tv40xucprQ

Score
10/10

Malware Config

Signatures

  • Vidar family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1940-1007-0x00000000010A0000-0x0000000001120000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections