Static task
static1
Behavioral task
behavioral1
Sample
31b236b9e59c726a7b415112cd5e3782cf0ef874aa8453d3c8b736128ac7d544.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
31b236b9e59c726a7b415112cd5e3782cf0ef874aa8453d3c8b736128ac7d544.exe
Resource
win10v2004-20220414-en
General
-
Target
31b236b9e59c726a7b415112cd5e3782cf0ef874aa8453d3c8b736128ac7d544
-
Size
668KB
-
MD5
b41a944db95e6d49798c3fa4f7bfb816
-
SHA1
2f67703e86741be1d9c0083f60796704804a8539
-
SHA256
31b236b9e59c726a7b415112cd5e3782cf0ef874aa8453d3c8b736128ac7d544
-
SHA512
f3979515f21efd4ba15358c1e0849c4467ea308905e0b9fdd6d10f9794bb348119aefcda6d9a071c0f75b4e50269b88d08ceec941f3938bcbaf976cd6ac86c3a
-
SSDEEP
12288:rJjwsORzaDSssIiAmIMMfeu9Qu9fxl3uyTSrjWjX3/np:1jvOdyxliQGu9Rdx8yTSrjWjPp
Malware Config
Signatures
-
Masslogger family
-
Vidar Stealer 1 IoCs
resource yara_rule sample family_vidar -
Vidar family
-
Vidar log file 1 IoCs
Detects a log file produced by Vidar.
resource yara_rule sample vidar_log_file
Files
-
31b236b9e59c726a7b415112cd5e3782cf0ef874aa8453d3c8b736128ac7d544.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 465KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE