EzLoader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EzLoader.exe
Size

200KB
MD5

faf92eb93d0a736a49e430b8b50b0298
SHA1

394d423171f3cd5f98b30f9c59ab521e40c001c5
SHA256

3d945247b01db44f9a4733e22806288e6911373a3407afce5f92afa67cae2394
SHA512

7d0b9c5e0b7a96374611363023583e95b4052da3b70e6b5691d26003f4339e09ee1b8568ff217945559a98ecb90582a0826d19f7b9268be3556d1fcc6ae79518
SSDEEP

768:A9tgQc9LDHmNcPcNkVQpcPctvmI72XcxaQGUWvdS9NisCKWsOTf0Qb:A9c2uI72XIabdURCaOTf0Qb

Score

1^/10

Malware Config

Signatures

Files

EzLoader.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ