Overview

overview

3

Static

static

3

ezfn_c2.dll

windows10-2004-x64

1

ezfn_c2.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    ezfn_c2.dll
  • Size 250KB
  • Sample260802-slbxcsbg99
  • SHA256 0077c37b301ab987188c9c48b4e2333771510252537357d787433643148117e7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • ezfn_c2.dll
    .dll 250KB

ezfn_c2.dll

  • IMPHASH ce93f06937c1542531fb4c9d7e32e9ac
  • SHA256 0077c37b301ab987188c9c48b4e2333771510252537357d787433643148117e7
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
7b:62:da:36:16:a4:ae:40:23:2e:a8:bb:68:98:3a:1d:73:3b:5a:5a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Take-Two Interactive Software\, Inc.,OU=Rockstar Games+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Take-Two Interactive Software\, Inc.,L=New York,ST=New York,C=US
Minor OS version
0
Major OS version
6
Entry point
181348
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Users\conspiracy\source\repos\EZFuckNigga\x64\Release\EZFuckNigga.pdb