D:\Tim.Gui\WorkSpace\Queclink_Software_Store\PC_Software\Manage_Tool\NewDir\GV75M_Series\Queclink_GV75M_Manage_Tool_SZ\Queclink_GV75M_Manage_Tool\obj\Release\Queclink_GV75M_Manage_Tool_V2.34.pdb
Static task
static1
Behavioral task
behavioral1
Sample
764cbc3c028717f628d65564342b15441dc00a3f2cd383cda26b7d7ab4f7b564.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
764cbc3c028717f628d65564342b15441dc00a3f2cd383cda26b7d7ab4f7b564.exe
Resource
win10v2004-20240802-en
General
-
Target
764cbc3c028717f628d65564342b15441dc00a3f2cd383cda26b7d7ab4f7b564
-
Size
1.5MB
-
MD5
cc4ae8742a504b4cb5c6dc1d3e15745e
-
SHA1
b4f140eca4b34bd780fe8e6dc71d846c51d4dd8f
-
SHA256
764cbc3c028717f628d65564342b15441dc00a3f2cd383cda26b7d7ab4f7b564
-
SHA512
383e0e33ebf0736888c4f42f6fe844bc9eb9bab7fefec8bbfc97962558f18fa1c37f03b8b1c0e4c47042aa8f33a94977e7bcba8c612e06502ed283fe6f08f83a
-
SSDEEP
24576:IT5nv5Qr3huXX8B6gFOhXHTxJ597Vq0ck5gzt49x:I/QrU9L6zty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 764cbc3c028717f628d65564342b15441dc00a3f2cd383cda26b7d7ab4f7b564
Files
-
764cbc3c028717f628d65564342b15441dc00a3f2cd383cda26b7d7ab4f7b564.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ