Behavioral task
behavioral1
Sample
8f3c947d5d1e2d3e3fd92acd79951c6c39320ab9d599fd5ae52e11fce00ace41.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8f3c947d5d1e2d3e3fd92acd79951c6c39320ab9d599fd5ae52e11fce00ace41.exe
Resource
win10v2004-20240709-en
General
-
Target
8f3c947d5d1e2d3e3fd92acd79951c6c39320ab9d599fd5ae52e11fce00ace41.exe
-
Size
363KB
-
MD5
86450a034e05af523bebe56017fa418c
-
SHA1
c619e02ab6d4cf7203860f88e934b225744a5407
-
SHA256
8f3c947d5d1e2d3e3fd92acd79951c6c39320ab9d599fd5ae52e11fce00ace41
-
SHA512
0b3bc98c9a1d6cff9248d6c12a6368c8ee719c9b9bec3bb710c83049d21ab9eea03a84955cf799e5abab5ab6c46953c9b0318f78fb2e4a18cb6511c49ecdeae5
-
SSDEEP
6144:6mlMJmfK4EiauLppbLUO0JIQyna0Sjt2a1gZ:fkmJaul9d0Jxyna0Sjt2a1gZ
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f3c947d5d1e2d3e3fd92acd79951c6c39320ab9d599fd5ae52e11fce00ace41.exe
Files
-
8f3c947d5d1e2d3e3fd92acd79951c6c39320ab9d599fd5ae52e11fce00ace41.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 345KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ