vidar | bff9d28cecddc9df5a52b45ace9c8817[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff9d28cecddc9df5a52b45ace9c8817.bin
Size

404KB
MD5

bff9d28cecddc9df5a52b45ace9c8817
SHA1

5f8dbbafdf107be1ff8cd6ef0ad868b7dc4e4292
SHA256

d43b94ed6ed92f48daca0f28cf5fa9cbdd384d993a1ff64bda9118cf335424fa
SHA512

08aaa2be6e8b1b88a98d00f6a50b1f5cd1dd8bd55b94b705e3045a33635a2668321ed465290728a9723bd817cff57d01c88af9051b9b6ec053f3a24f21f23183
SSDEEP

6144:cUNdslLON1aPsi5chCRXmI4/LusZbXm+QRAR/NVJCcfhOqUZaBMYUB:cxGwP/OWOxXm+4ARBCc+oKxB

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff9d28cecddc9df5a52b45ace9c8817.bin

Files

bff9d28cecddc9df5a52b45ace9c8817.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ