EZLinkvertiseBypasser[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EZLinkvertiseBypasser.exe
Size

7.7MB
MD5

aea1cb4112e6c9ee9048a4fa1dd3ad3e
SHA1

24200398223ea927c29c821dacb5688f3c108e47
SHA256

4c7575f1dd1fffb58930a6ba3bf1be00db939220483aa671a5441d3421c7469f
SHA512

b858868ef8203c251a40f7b0bc2cf97b72b7289e55e74b4502e17344d4786e6c0ce621617c70a18c978d561c3552c6687b1f7c9b7b048b88854f1846124fd849
SSDEEP

196608:tYJQMUxL9AwB8XsAa3uJ2tSpFlXQne8ZXeBD1C9V2:tCEAwB8X63uJ2wnlXQjedE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EZLinkvertiseBypasser.exe

Files

EZLinkvertiseBypasser.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\SelfmadeTools\EZLinkvertiseBypasser\EZLinkvertiseBypasser\obj\Release\EZLinkvertiseBypasser.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ