Behavioral task
behavioral1
Sample
43483820x00000000004000000x0000000000465000memory_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
43483820x00000000004000000x0000000000465000memory_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
43483820x00000000004000000x0000000000465000memory_JC.dmp
-
Size
404KB
-
MD5
72140a3aba55a5fd0834802591fa0fb7
-
SHA1
31912e42a5144ca7c67bb9992a28735d5af90446
-
SHA256
94e79466743cb7e61adde66ac5fcdd14f5d8f861009b86ab562a847a4effc384
-
SHA512
57bc132ba99138d0a3e27aaf5d775cda3b1e82ddfac15613b21ed464ba8499c1e2bc5165e758d3529bde20291461898801b63ed10243eacda7542fa050ce7f32
-
SSDEEP
6144:OisujIl/IUezxowQpnI4+4uiNIGnRf+xmmZRDZqvhZvdV+4:Opn/085AyRf+xLDZqzD
Malware Config
Signatures
-
Vidar family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43483820x00000000004000000x0000000000465000memory_JC.dmp
Files
-
43483820x00000000004000000x0000000000465000memory_JC.dmp.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ