Gztoqonzcv[.]exe | Triage

Sharing

General

Target

Gztoqonzcv.exe
Size

601KB
MD5

90bff409b8f58d827740b65f674d1015
SHA1

a04b5710d353977395e861893726aee9e8d8d783
SHA256

1d862176fffa70dbe9e1ccbc6986c1a26d7bf2f8384c26de4f8c9c492a9368e8
SHA512

48b83d20b664b6f79c1147de1461a9f25e0818e85a2e7f32dbef41255c19fb6d795391d72dc63c9a2d48ccc31b559948f731377a635e126f8a2927cb0b412fc1
SSDEEP

12288:Vf6TL2fgsNc5p0sSksyunTHU+DyGar9JyajiV8R3V4TY3:Bjs99++GaFiVw3V4Tu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Gztoqonzcv.exe

Files

Gztoqonzcv.exe
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 578KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ