gZ66[.]dll | Triage

Sharing

General

Target

gZ66.dll
Size

664KB
MD5

403e7144a61427858f1dfbca09e5e3a6
SHA1

f03ebdc3a713b0eb6671209a383d311de81822f3
SHA256

1c2d6b5c1c4c5448da6772fb72e1c7acdd16e6dd028cfa00886d167263b21259
SHA512

456f925440def3102721bcb00d517591e9f86ef89f934c83b9620d2e1ba3af3be803f8e6661f0a07501677c906070c4d1732daeffb1fe1e727bd26715985bc71
SSDEEP

12288:yG8VkejT7f9+F7VnV8fLJZ5cobM9ZNe4be0CoeCyovduJJFIPepILoDSO:yFk68VV8fNc5Z03kvwJ4eeU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
gZ66.dll

Files

gZ66.dll
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

b

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ