Behavioral task
behavioral1
Sample
1734647108deb38ffd55bf4ee0e1256f32366f93320efa5c08106fb229cd97f7a3c54ee7b3565.dat-decoded.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1734647108deb38ffd55bf4ee0e1256f32366f93320efa5c08106fb229cd97f7a3c54ee7b3565.dat-decoded.exe
Resource
win10v2004-20241007-en
General
-
Target
1734647108deb38ffd55bf4ee0e1256f32366f93320efa5c08106fb229cd97f7a3c54ee7b3565.dat-decoded.exe
-
Size
361KB
-
MD5
4bb75ccb09135ac25f81d2ed4d523be3
-
SHA1
993cd8d4d4fdb660b3d6d40b307a4d482f652e63
-
SHA256
19f7eb5708f6e144e092b9852bc12443769b73dd4f33acb02568fa391901e143
-
SHA512
483a559c0192679d3e4cb9cc92ecb557a9cc3f5259d358be3e837ff440ec281a984bba9ac621dd2b03ef20bf7bcc608520cb3dfff4b6046bc54824df4601d64d
-
SSDEEP
6144:zjwlMJmfKTwQ60bJA0b3g8fsw544mikD0h66C:z8km2RbG+bUw5tzkD0hFC
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1734647108deb38ffd55bf4ee0e1256f32366f93320efa5c08106fb229cd97f7a3c54ee7b3565.dat-decoded.exe
Files
-
1734647108deb38ffd55bf4ee0e1256f32366f93320efa5c08106fb229cd97f7a3c54ee7b3565.dat-decoded.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ