EzFN-Manager[.]exe | Triage

Sharing

General

Target

EzFN-Manager.exe
Size

11.3MB
MD5

72129e47177ee1b7e454eecf9bff4dff
SHA1

67089411d7483d5e12c07610602d1c1299528c5a
SHA256

a45af606076ebaaff640b37f37dd7c012d397ae5ebacc2d721a9a78cc8d9e672
SHA512

cef9d9a35d9a444f2723a5fd367c546241fea85a5a130890136e5ddcb849af41b031498c108ea8d107f1a91ae66693fd1e6fe543f2bd3196770bfdcbec65eb5b
SSDEEP

196608:ywrwlypu8PZ3PpxRY5aJcEf86CK8Md/f5vjO0xbCEZ7LL80MaJsR+h:ywGuua3YaKC8XWX5qQuE7v8CJG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
EzFN-Manager.exe

Files

EzFN-Manager.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ