Behavioral task
behavioral1
Sample
8b0ce560e916c3abe4502660a61c7a4130c0f7e95604c855634fd7bf6580a640.exe
Resource
win7-20240221-en
General
-
Target
8b0ce560e916c3abe4502660a61c7a4130c0f7e95604c855634fd7bf6580a640
-
Size
3.9MB
-
MD5
5dad1532d5c2bc617bfc76311222d812
-
SHA1
e9e2ee901b02755ea197ff60c5d9eed26785e0c6
-
SHA256
8b0ce560e916c3abe4502660a61c7a4130c0f7e95604c855634fd7bf6580a640
-
SHA512
d50540dbd3b8c488bb51828fbb678e1be41c49ed8562f88f0e8b7dbf1cd5d0de86702d6588b00f0217f75ce24bd62e8e2e93ae75de420f2c2a16c9154cb72dca
-
SSDEEP
98304:f8Yv8mpQcPAf5Y1nk+t5v5c0OtktFIOZx:f4mpQcPAf5Y1nk+tDOCtFbx
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b0ce560e916c3abe4502660a61c7a4130c0f7e95604c855634fd7bf6580a640
Files
-
8b0ce560e916c3abe4502660a61c7a4130c0f7e95604c855634fd7bf6580a640.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ