1dca642f3d4e8fce5f3a74eeb3072bbc471e933e4e3b95043031cf4779acd39e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dca642f3d4e8fce5f3a74eeb3072bbc471e933e4e3b95043031cf4779acd39e
Size

1.5MB
MD5

99bc4de99e150d9b121ce23bb69cd2fb
SHA1

ef1d12c24660718e09a8e233f5d3b58fc1c8d541
SHA256

1dca642f3d4e8fce5f3a74eeb3072bbc471e933e4e3b95043031cf4779acd39e
SHA512

8e399729e1a8f6572bef4fc4c0d705378e03bfb46a1d5f97d9371f2f5458748397e40185ead080994a76f31a4e075f43473c0a1098dd164cb4ac9e6d0547cd84
SSDEEP

24576:ZT5nv5Qr3huXX8B6gFOhXHTxJ597Vq0ck5gLtVfx:Z/QrU9L6LtZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dca642f3d4e8fce5f3a74eeb3072bbc471e933e4e3b95043031cf4779acd39e

Files

1dca642f3d4e8fce5f3a74eeb3072bbc471e933e4e3b95043031cf4779acd39e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Tim.Gui\WorkSpace\Queclink_Software_Store\PC_Software\Manage_Tool\NewDir\GV75M_Series\Queclink_GV75M_Manage_Tool_SZ\Queclink_GV75M_Manage_Tool\obj\Release\Queclink_GV75M_Manage_Tool_V2.34.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ