ezzDodoss (4)[.]exe

General

Target
ezzDodoss (4).exe
Size 9KB
Sample260716-b9rt2sd14z
SHA256 ce785ef8821c27772dde75037f5d3132c1b99e31f072c9b733245127256612e9
MD5 221de1f290c6fbee9bbaea37e211812e
SHA1 cba7b39912c9d6cfff46a0bf4167e44bbc69b536
SHA512 6d92777e55c3c51937c7e99291f72b394ef444146fe90a4e760a2a5c8aac34ce0e028f63188378a34c3cc2c7db8f01ffd0b99765ea20e9e1b6bd88a4c63f7290
SSDEEP 192:hd60KXLPOrRRS+87QRUZl+LVQKYussdNlOsdKKr:hc7XLO/ShQRa+RQKYu339P
TLSH
T19612F816B3F88626F9B74A364CF3524102757309EE279B1D38C9728F6E2371245E27A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ezzDodoss (4).exe

File Explorer

ezzDodoss (4).exe

.exe 9KB

ezzDodoss (4).exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ce785ef8821c27772dde75037f5d3132c1b99e31f072c9b733245127256612e9
MD5 221de1f290c6fbee9bbaea37e211812e
SHA1 cba7b39912c9d6cfff46a0bf4167e44bbc69b536
SHA512 6d92777e55c3c51937c7e99291f72b394ef444146fe90a4e760a2a5c8aac34ce0e028f63188378a34c3cc2c7db8f01ffd0b99765ea20e9e1b6bd88a4c63f7290
SSDEEP 192:hd60KXLPOrRRS+87QRUZl+LVQKYussdNlOsdKKr:hc7XLO/ShQRa+RQKYu339P
TLSH
T19612F816B3F88626F9B74A364CF3524102757309EE279B1D38C9728F6E2371245E27A1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13850

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Administrator\source\repos\ezzDodoss\ezzDodoss\obj\Release\ezzDodoss.pdb

ezzDodoss (4).exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ezzDodoss (4).exe

mscoree

dotnet