D:\Tim.Gui\WorkSpace\Queclink_Software_Store\PC_Software\Manage_Tool\NewDir\GV350_Series\Queclink_GV350M_ADD_Manage_Tool_SZ\Queclink_GV350MADD_Manage_Tool\obj\Release\Queclink_GV350M_ADD_Manage_Tool_V1.1.0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8262d4d978d29b3cd2e45ff93e623ba0e40f7054f0f018fad059c54223cd9e03.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8262d4d978d29b3cd2e45ff93e623ba0e40f7054f0f018fad059c54223cd9e03.exe
Resource
win10v2004-20240802-en
General
-
Target
8262d4d978d29b3cd2e45ff93e623ba0e40f7054f0f018fad059c54223cd9e03
-
Size
1.6MB
-
MD5
3b8fc506dec09f7ea986b67fdfbd3e1e
-
SHA1
88e73c85d8c13e91d661c4c0b3f24fdf5cb54195
-
SHA256
8262d4d978d29b3cd2e45ff93e623ba0e40f7054f0f018fad059c54223cd9e03
-
SHA512
929805fc947541bbb3d6a74adb2e2a2501bc2c5a7201ebbbb1ecf55752670032f7f7277f28cd84576f84bb62eb7dff4b340a914097862fb2e639e49d386cc644
-
SSDEEP
12288:oFuUIGJfCJXSaSDfbKJQkPk6KrNVdZdo0xYIwCaiTxJ5bV67bbOxY:oFu9AFo0xhwLiTxJ5bVAbbOx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8262d4d978d29b3cd2e45ff93e623ba0e40f7054f0f018fad059c54223cd9e03
Files
-
8262d4d978d29b3cd2e45ff93e623ba0e40f7054f0f018fad059c54223cd9e03.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ