vdir[.]exe | Triage

General

Target

vdir.exe
Size

94KB
MD5

44894a13338e0821527c8a3c2ab99e36
SHA1

73ffaa60bd353fc4146a382ea9a8d491e6e07798
SHA256

77bf08a965832010df86b17c75307a2ff8ad64c6d509de2af7ee9808fbdd7908
SHA512

e0f1a3bdc6e5fa5de21041aade562489662de23dcc6ce14455f817f79ccaba4c3b7cc93a6fc389610f63d5c5a5a0abda9fb4357238ca6b8ea652ac546b46d908
SSDEEP

1536:eHT3TgsdsLXE/nf6bhLnCMtXeeX+2O6Nv+OWwyobst+3Onj9:Evgsd/6bVCMtOeXVnAO/jbstMy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vdir.exe

Files

vdir.exe
.exe windows:4 windows x86 arch:x86

89a5ca522d9a551a11b8cb128192f938

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__assert
__errno
__main
_ctype_
_tzname
abort
access
acl
asctime
atexit
calloc
closedir
ctime
cygwin_conv_to_posix_path
cygwin_internal
dirfd
dll_crt0__FP11per_process
exit
fclose
fflush
fprintf
fputs
free
fstat
fwrite
getenv
getgrgid
getgrnam
getpwnam
getpwuid
gettimeofday
gmtime
ioctl
isatty
localeconv
localtime
longjmp
lstat
malloc
mblen
memchr
memcpy
memmove
memset
opendir
putc
qsort
raise
readdir
readlink
realloc
setjmp
setlocale
sigaction
sigaddset
sigemptyset
sigismember
signal
sigprocmask
stat
strcat
strchr
strcmp
strcoll
strcpy
strdup
strerror
strftime
strlen
strncmp
strncpy
strrchr
strtoul
tcgetpgrp
tzset
vsnprintf

msys-intl-8

__printf__
libintl_bindtextdomain
libintl_dcgettext
libintl_fprintf
libintl_gettext
libintl_sprintf
libintl_textdomain
libintl_vfprintf

kernel32

GetModuleFileNameA
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_cy
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

89a5ca522d9a551a11b8cb128192f938

Headers

File Characteristics

Imports

msys-1.0

msys-intl-8

kernel32

Sections

.text Size: 73KB - Virtual size: 73KB

.data Size: 17KB - Virtual size: 16KB

.data_cy Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.text
Size: 73KB - Virtual size: 73KB

.data
Size: 17KB - Virtual size: 16KB

.data_cy
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB