vidar | e6f08efa164b70exeexeexeex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6f08efa164b70exeexeexeex.exe
Size

728KB
MD5

e6f08efa164b70dfbc9f9407421c2276
SHA1

8b55cae8afe12e3d52854089a93f2e638fc8b18e
SHA256

1ff91c1248719f4fa2cfbb6161cfebab97a84db4bca61bb4aad64b2ce9b38bf1
SHA512

faa9b837cd0aaf60d103e1998a86bcd1f58ac849b9e0d23402ebd806fe55293d48bd13b2378130ee7f0755448ae03854ae1b5ddaceeafdddd1331c391588b9d9
SSDEEP

6144:JBA0i2uim7rAPtf9w8zSRWBt9JPpr+hT6WzY2Rh6p3o7u1:JG0iwj9w8zS4BPJPpr+k2d0

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6f08efa164b70exeexeexeex.exe

Files

e6f08efa164b70exeexeexeex.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 340KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE