Overview

overview

10

Static

static

10

2376-56-0x...ry.exe

windows7-x64

2376-56-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2376-56-0x0000000001190000-0x0000000001BF0000-memory.dmp

  • Size

    10.4MB

  • MD5

    6d3d045e7af4196cb0fe394e4a7d8095

  • SHA1

    8315302710c885c62e3076c92bc7174fda527f12

  • SHA256

    e0a3636b43b289fef23557eaf6cd8b25cae712cc548cf6c15215c14eed3d059c

  • SHA512

    9a51521b31de741994df92a47837f746a063e67ce0f96df7b5aa0f8890ab402548ed13b3be936519607d5e7ed9b9b82ec94da88fe2d1f21e16ddf2dd5eb701e9

  • SSDEEP

    196608:ngIfQttipYqG/N3w3oYwk6mtJs6L3H2cl1Xxwe/e04Fr:rQWpYptOtsAO6L3H2A1x5e0Y

Score
10/10
themidavidar

Malware Config

Signatures

  • Vidar family
    vidar
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2376-56-0x0000000001190000-0x0000000001BF0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections