vidar | 79d65705891d39ffb48d429ef8df23af[.]bin | Triage

Sharing

General

Target

79d65705891d39ffb48d429ef8df23af.bin
Size

32.4MB
MD5

79d65705891d39ffb48d429ef8df23af
SHA1

7b5944ff2cb89454dc3ab7363eca54075af9644f
SHA256

ba6627ce9f53a7482ccd0f7826d00756ad4e96c4446816e33c8a6398fd3abc32
SHA512

a0b7cffe04fb176d49e5ea08b5e2e0316dede1367fccb0fbb39106eb5adcf62a744049d9b8cc03f303fd7407a56a91f74f127675ec11220dd3187c36a4d70735
SSDEEP

12288:nNvC1zqjETs1z/hVBzeC+SwIrIbyVgLUeL/:NvnQTs1zhnzT3UuVgLHL/

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79d65705891d39ffb48d429ef8df23af.bin

Files

79d65705891d39ffb48d429ef8df23af.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ