vidar | 4766017626cb88f640f719f9ba345ae5_mafia_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4766017626cb88f640f719f9ba345ae5_mafia_JC.exe
Size

860KB
MD5

4766017626cb88f640f719f9ba345ae5
SHA1

c424973a74567cf1fde5d0421770748683b9ecf7
SHA256

4646dca22f6e931864c07dc44e23300f99fff2f12ae72aa6ecfb51ff1a36d652
SHA512

322216bc67aa6612e2e321ffdab2173fbce5aeac1f5cd90387a4ebe3e1f8cff3fc8bb60bda1b1d47b55cdc01b5e62343daae87a8e158d35d228b8ddb2a0cec38
SSDEEP

12288:kRukYIP/OYdRNkqZl0Et8uEXE6dl5H9m62Fq25HAG:kRu16WYdRNDl0Et8uEXE6dl5H92r5HA

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4766017626cb88f640f719f9ba345ae5_mafia_JC.exe

Files

4766017626cb88f640f719f9ba345ae5_mafia_JC.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 391KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ