vidar | 0c71dd9ce1a0e93709ebac37e5849c1b[.]bin | Triage

Sharing

General

Target

0c71dd9ce1a0e93709ebac37e5849c1b.bin
Size

404KB
MD5

0c71dd9ce1a0e93709ebac37e5849c1b
SHA1

dc4515702710bf3c3f3f641feb6400d665f98108
SHA256

662d2763c10b5d28395cb0d83e773ce3415934b51e5616de4cb73086d912a628
SHA512

808432d192c5a35dcffb4214fb49d092d072884257cb9fcd9b2abc57fdb7734fa3904880a472e1141d1735dd174d07c24d5bc739d3135cdd1b09f4db955e13a5
SSDEEP

6144:OisujIl/IUezxowQpnI4+4uiNIGnRf+xmUZRDZqvhZvdR5:Opn/085AyRf+xFDZqzF

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c71dd9ce1a0e93709ebac37e5849c1b.bin

Files

0c71dd9ce1a0e93709ebac37e5849c1b.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ