Behavioral task
behavioral1
Sample
a35025ae9f14059622435eb95e5f97a45f226131d68d835ede827e09a9ccaf12.exe
Resource
win7-20240221-en
General
-
Target
a35025ae9f14059622435eb95e5f97a45f226131d68d835ede827e09a9ccaf12
-
Size
3.9MB
-
MD5
0afa4007fb6ec8ed00607477ac0d6b80
-
SHA1
cf1d8a9ad172f0c62b7110950bab3fff9b05e78e
-
SHA256
a35025ae9f14059622435eb95e5f97a45f226131d68d835ede827e09a9ccaf12
-
SHA512
6df957376664d841e262fc41fc69b7401ad05744376a0fd14967726774817076929ede1363c8b3c13399b654658b98b683f4df9e2358120d17e9bbb443295467
-
SSDEEP
98304:C8Yv8mpQcPAf5Y1nk+t5v5c0OtktFIOIx:C4mpQcPAf5Y1nk+tDOCtFGx
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a35025ae9f14059622435eb95e5f97a45f226131d68d835ede827e09a9ccaf12
Files
-
a35025ae9f14059622435eb95e5f97a45f226131d68d835ede827e09a9ccaf12.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ