vidar | 2982da0d8faaa0c60e91d2b2ce7d85f0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2982da0d8faaa0c60e91d2b2ce7d85f0.bin
Size

444KB
MD5

2982da0d8faaa0c60e91d2b2ce7d85f0
SHA1

694613e5d8a3cdb648bed2de641014abc3778200
SHA256

a3df740d295a677b7749cde1f2bbe074bd45209edf333f7e7d539b793ebc30a8
SHA512

9c46722dd607158c7a5cde58a877b886bd0d2dd13f740c7fa523115bd21f284aa0ecfd8bf077eece220b704338eb3ec4fad084eeb0bcf6d902c1ccf8a8d0e29a
SSDEEP

6144:O2+XqGAdyvA944aSL0g7SLjxhDOfeNROhXkO6J5IUUZcA:O2+XqUvA92/gGLjzDqeNROhl6TR

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2982da0d8faaa0c60e91d2b2ce7d85f0.bin

Files

2982da0d8faaa0c60e91d2b2ce7d85f0.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ