GTweak[.]exe | Triage

Sharing

General

Target

GTweak.exe
Size

2.0MB
MD5

f39e25a531547d491058b65987601a08
SHA1

2aff7da8a4b750885426410ecba9b16e10ccaa9b
SHA256

6e340e96092a63bc7155da8c95dcb8e53917a29c6b9e0e426cf45501aa4743d1
SHA512

1b6871251e08eae53abf8fc2ed7bc9af1cfc4b672c9986c7962fd525d5dff266551d7e0e1d5aee9f0909e1229571b275cba13706888c1f3806a60468b598891a
SSDEEP

49152:voiu/jCF/nrH1LkOVUQkqXfd+/9AqAanTmV1:voiu74/nrVgCkqXf0FPAWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GTweak.exe

Files

GTweak.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\GTweak\.Source\GTweak\obj\Release\GTweak.pdb

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ