Behavioral task
behavioral1
Sample
2024-01-28_ca85e18b34468c0e99e6280080878311_mafia_vidar.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-28_ca85e18b34468c0e99e6280080878311_mafia_vidar.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-28_ca85e18b34468c0e99e6280080878311_mafia_vidar
-
Size
376KB
-
MD5
ca85e18b34468c0e99e6280080878311
-
SHA1
c912a40a8e5ce504402593195711183aceaec33f
-
SHA256
78cbbad8b3f082a6566e93211a09a6d439df26b5ed58bb34b494f9d1bd434c7f
-
SHA512
106c0fcc2a7c59194235a7f78a77a40269390f8e092e9b88c20fd1def17218e0b95ed0513fe63e6a08525eda233bc6360ef7fe6f23da7e5849e96270448e284d
-
SSDEEP
6144:Kve9hPYBXAQQcBAC5DD9KcnzCbG0a8C7ug:KMPlu5gACbZ4ug
Malware Config
Signatures
Files
-
2024-01-28_ca85e18b34468c0e99e6280080878311_mafia_vidar.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ