D:\Queclink_Software_Store\PC_Software\trunk\Manage_Tool\GB200S\Queclink_GB200S_Manage_Tool_SZ\Queclink_GB200S_Manage_Tool\obj\Release\Queclink_GB200S_Manage_Tool_V3.17.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e5c9b3867cdfc90428370df5eb6f5391c0ea7cd4119299cbdec03a58de99f73d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e5c9b3867cdfc90428370df5eb6f5391c0ea7cd4119299cbdec03a58de99f73d.exe
Resource
win10v2004-20240802-en
General
-
Target
e5c9b3867cdfc90428370df5eb6f5391c0ea7cd4119299cbdec03a58de99f73d
-
Size
923KB
-
MD5
c706384f6c8deeb047546e36dfc3a911
-
SHA1
d785976706432214774f83a03e6c2061094991f9
-
SHA256
e5c9b3867cdfc90428370df5eb6f5391c0ea7cd4119299cbdec03a58de99f73d
-
SHA512
819a44386359445dd9c83ae5e1a50253a135095a8236680bb6b19b125296eae0222f6c03c403d408a45aa79df0730a7e3611f59cf0818a2fe75f4c2ebea238de
-
SSDEEP
12288:hBtgimpgLeTx36xRuZYLXTlQ0FxOrpM6xJ5M2g+b27rOqpX0HwLN7:3tKdUXRb/WpDxJ5M2g+bsrdxb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5c9b3867cdfc90428370df5eb6f5391c0ea7cd4119299cbdec03a58de99f73d
Files
-
e5c9b3867cdfc90428370df5eb6f5391c0ea7cd4119299cbdec03a58de99f73d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 910KB - Virtual size: 910KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ