C:\Workspace\Projects\Windows\Installer\Auto\QSLauncher\Release\QSLauncher.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
5a7a41b408a2fa98605015866308fca1abcebd90d1b40554f841841cb7b2768bN.exe
Resource
win7-20240903-en
General
-
Target
5a7a41b408a2fa98605015866308fca1abcebd90d1b40554f841841cb7b2768bN.exe
-
Size
99KB
-
MD5
b0d70de99c47f381d6edeefce3f55f30
-
SHA1
5799909e2a4b9f4d75f5ac9255a52c47a048bdce
-
SHA256
5a7a41b408a2fa98605015866308fca1abcebd90d1b40554f841841cb7b2768b
-
SHA512
1a0ea5b4e7460998c51f3e27a2cebd94f01c4e27ce47212070e2e68b309d6f2d9fcdb50403a502f643ced74765fe86aa2323529c118bcc09b11e793c24d74291
-
SSDEEP
1536:rKtU7VoIHCBk2GBKG/SDxHHfVNmiv2Kva6tMef3PtZ5OKJg/p6:rKtURRxBtsRqYvaIMWZ5OKJg/p6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a7a41b408a2fa98605015866308fca1abcebd90d1b40554f841841cb7b2768bN.exe
Files
-
5a7a41b408a2fa98605015866308fca1abcebd90d1b40554f841841cb7b2768bN.exe.exe windows:5 windows x86 arch:x86
a2049e7c20721a44a3f9f5d0cc10bcc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
RemoveDirectoryW
GetModuleFileNameA
GetModuleHandleA
FindNextFileW
CloseHandle
GetWindowsDirectoryW
DeleteFileW
SetFileAttributesW
Sleep
LoadLibraryA
GetExitCodeProcess
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
FindClose
GetProcAddress
SetLastError
GetLastError
GetTempPathW
MultiByteToWideChar
GetACP
CreateFileW
GetSystemDirectoryA
GetVersionExW
CopyFileW
WideCharToMultiByte
GetSystemDirectoryW
GetWindowsDirectoryA
CreateDirectoryW
GetCurrentProcess
MoveFileExW
GetLocaleInfoA
FindFirstFileW
CreateFileA
InterlockedDecrement
lstrcpyA
OutputDebugStringA
GetLocalTime
OutputDebugStringW
CreateProcessW
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapFree
HeapAlloc
RaiseException
LCMapStringA
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
ExitProcess
WriteFile
user32
wsprintfA
wsprintfW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetSpecialFolderPathW
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
lz32
LZClose
LZOpenFileW
LZCopy
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.zero Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ