vidar | 714d3347b89be26a8a78207de56aeae9_mafia_JC[.]exe | Triage

Sharing

General

Target

714d3347b89be26a8a78207de56aeae9_mafia_JC.exe
Size

580KB
MD5

714d3347b89be26a8a78207de56aeae9
SHA1

6e6930d6ab7d645a8a13743e5c84c3a0c3cde63c
SHA256

0dcd5812449bc6af677365d347432135b3de30efdabbfa8585e7d1514b148873
SHA512

f6eb8a20d7d7dedfebe96f71770b4b2f0b2cb1e3af25d48639103dfd6a3b4f863c696eefab622c288fee26bfe14dd5026599cdca220017a159daf0796d2317c8
SSDEEP

12288:VbuRX6D7ENiKUqDgYumrVRXLRXNR+z5u:Vb26vENiWD73VRozo

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
714d3347b89be26a8a78207de56aeae9_mafia_JC.exe

Files

714d3347b89be26a8a78207de56aeae9_mafia_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ