HEUR-Backdoor[.]MSIL[.]Quasar[.]gen-5a6646ab6bae7acd63766404788d9d3fbd7b4fe63adde50e0c1282ffbdafe91f[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HEUR-Backdoor.MSIL.Quasar.gen-5a6646ab6bae7acd63766404788d9d3fbd7b4fe63adde50e0c1282ffbdafe91f.exe
Size

145KB
MD5

3461399ae8f291b08accf80b0a63665b
SHA1

e8747b3120cd260a49aad12bdce2e5a4f3e2d0f6
SHA256

5a6646ab6bae7acd63766404788d9d3fbd7b4fe63adde50e0c1282ffbdafe91f
SHA512

0afef367f0758aa2029dbcc967983d81aae93215271f559af53ebd0c322f2a7e5b77e2fec362680468ace7b389cd09be6a64681166241122a0cb6534dccd286a
SSDEEP

3072:5ybgkoH6teMJzUkIAwKIW4lbycQtSOoD5f2VX7X2n0iBz:sbgb8eMcAUWybyFxyfOXLS9

Score

N/A

Malware Config

Signatures

Files

HEUR-Backdoor.MSIL.Quasar.gen-5a6646ab6bae7acd63766404788d9d3fbd7b4fe63adde50e0c1282ffbdafe91f.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ