vidar | c12ab8ced8278e510d351a12e9d505e615403d270b10c7c8b4bfc7625ed0c5e6[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c12ab8ced8278e510d351a12e9d505e615403d270b10c7c8b4bfc7625ed0c5e6.bin
Size

820KB
MD5

53ac02a22daa1bc505528d115d35c368
SHA1

5608891d26481bbdd69aa2a88262b93d6d10392e
SHA256

c12ab8ced8278e510d351a12e9d505e615403d270b10c7c8b4bfc7625ed0c5e6
SHA512

333058a1fae17ccd072ce13ef62030ee53d430568abd135a59f47c7a8f447cab5ebc55ff979ef49fe61f4b97dd018ebfe4555bf103b73d02b03f8280e824b3cd
SSDEEP

24576:DoBRzK9WagJpaI0zPIPKSnAMhPvtXy/p4IIqiwk+n1zmhf/V:DoBKWbnahjIP5nA4vtXQp4Ili/+5Uf/V

Score

10^/10

stealer vidar

Malware Config

Signatures

Vidar Stealer 1 IoCs

resource	yara_rule
sample	family_vidar

Vidar family
vidar

Files

c12ab8ced8278e510d351a12e9d505e615403d270b10c7c8b4bfc7625ed0c5e6.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ