Behavioral task
behavioral1
Sample
3ea5448836e2cb2c6bbf641ec79a78eae0f17acbec7d29666eb2b8ec8fa8a716.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
3ea5448836e2cb2c6bbf641ec79a78eae0f17acbec7d29666eb2b8ec8fa8a716.exe
Resource
win10v2004-20241007-en
General
-
Target
3ea5448836e2cb2c6bbf641ec79a78eae0f17acbec7d29666eb2b8ec8fa8a716
-
Size
2.6MB
-
MD5
85632fc8c10adb762cfdfd256b6fe930
-
SHA1
60b7e566b525536f191575c97d68e351860d5854
-
SHA256
3ea5448836e2cb2c6bbf641ec79a78eae0f17acbec7d29666eb2b8ec8fa8a716
-
SHA512
b4d93cb5b2b1d876a3a70f62aa5eea963d5d1f851286216de31c3cd9eb96804540c3162075852327a36bd0434f16a46df33822770743acee0d2c15b1bd1911df
-
SSDEEP
49152:qUd1/DM2zv8aMlqCPwln5+Hjdh+EuvQ1VeiroGnB:qUPrM2zEaMlqCPwln5+Ddh+ZvuD
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
resource yara_rule sample family_quasar -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ea5448836e2cb2c6bbf641ec79a78eae0f17acbec7d29666eb2b8ec8fa8a716
Files
-
3ea5448836e2cb2c6bbf641ec79a78eae0f17acbec7d29666eb2b8ec8fa8a716.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ