vidar | adeaef6ed80cc2exeexeexeex[.]exe | Triage

Sharing

General

Target

adeaef6ed80cc2exeexeexeex.exe
Size

452KB
MD5

adeaef6ed80cc2f406b5e9b171910dcc
SHA1

4d112d4fed0c368df3e898c8b4044fe8fe93b17e
SHA256

e1dc0174a89aeb58f9834ee3c18d9d3cc26c103cb44e79f7b6c17399e216bd81
SHA512

b672bb81668e519bbc99ad87b0f35c352754bf4b630e03f243e91262128bd1524e3e321cfe987dedb71702c4fc81866306032275957612afc666f7f826bb757c
SSDEEP

6144:7Vv/3min9NW2AzQTShI21g6BCW7zfmSazcn4v4PHwyCU5Ax4z8KAl:Zv/33ntA8A1phKJcn4vuQys+Ql

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adeaef6ed80cc2exeexeexeex.exe

Files

adeaef6ed80cc2exeexeexeex.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ