D:\ProjectList\MES_Innotool\source\Custom_MES\FrontEnd\TQMUI\obj\Debug\TQMUI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
TQMUI.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
TQMUI.dll
Resource
win10v2004-20240508-en
General
-
Target
TQMUI.dll
-
Size
48KB
-
MD5
872c7359d3583a262e1777760a7e996c
-
SHA1
c8e8d70aa7da6e6f555a96d803c8a442afc80033
-
SHA256
9a0c1d0a5a4eff4fb2d5a4be2c988a51e9ac59444b5f242e66210b6a3612f764
-
SHA512
3e015d346205519d9163154c7daf43e472b41391802df6a87ea4108676a354dfab5b8a1a375f5fbdf11bc990a95b1f3f3fa55cb99ca8f92d09e088e6077bb6bb
-
SSDEEP
768:Az48ptEyya38Zcs1HDjb9+mRH5QNipwmqeWGY9VxB3bXNx/mk/mo:58ptELlcs1HDf9LpUeWGY9bB3hx/mk/1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TQMUI.dll
Files
-
TQMUI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ