vidar | NEAS[.]cee3e316c2046775d35e241640b11a60[.]exe | Triage

Sharing

General

Target

NEAS.cee3e316c2046775d35e241640b11a60.exe
Size

404KB
MD5

cee3e316c2046775d35e241640b11a60
SHA1

f7a0a1676667aca4f4b1df25366afd0b39b56d32
SHA256

e7f3c603190637122bdbb6a6d4ad379e42279c62a406178db04d570ca9b817d3
SHA512

557d7434831af963ab3fb8d13fbd3f0c05e31437ff6ec94e5971ba18ca6b44f4808f22e844bd5446b768d502bfd60b53300023884aa35520109bde7290684063
SSDEEP

6144:XA+1e4b30YI1zA7I4ucur1srMPOZcFuIR4/hx:3XbkSlNrmOZcFu24

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cee3e316c2046775d35e241640b11a60.exe

Files

NEAS.cee3e316c2046775d35e241640b11a60.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ