vidar | 6e4e274df75b7f17c30221f4ce876a59[.]bin | Triage

Sharing

General

Target

6e4e274df75b7f17c30221f4ce876a59.bin
Size

452KB
MD5

6e4e274df75b7f17c30221f4ce876a59
SHA1

cdd98da553a6576980ca3e83665c7eb65b9672dc
SHA256

f1c6ebb1b4e8db8a60e58f94d0b3528ddad1121da79048780b97f8981edc522b
SHA512

ac872d4222a0b2300f6cc5516b1590204be95542a3cc55365de22617d0e2b92256bb7c3cacc243d2e9e185eead094d3e1d8d773f762c2b48af74b17fcb679398
SSDEEP

6144:FjZi5dyACB0iCHcbk8ukYGFOg1i5snvEzhLJqfi:FjZgyAmk8uBGYg1i5snvEJJq

Score

10^/10

vidar

Malware Config

Signatures

Vidar family
vidar

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e4e274df75b7f17c30221f4ce876a59.bin

Files

6e4e274df75b7f17c30221f4ce876a59.bin
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ