Static task
static1
Behavioral task
behavioral1
Sample
Lilkey EX.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Lilkey EX.exe
Resource
win10v2004-20231215-en
General
-
Target
bd70f8576ffe9851b8174d25b24c37ba3d9adec182dfe2b864bac0ebd007605b
-
Size
495KB
-
MD5
d3f1eae6b82537b036b26863f4c32775
-
SHA1
8475d2d3cd4351a8ecf1c686452f6de3f71d68e0
-
SHA256
bd70f8576ffe9851b8174d25b24c37ba3d9adec182dfe2b864bac0ebd007605b
-
SHA512
8d720160599638a02a7d99cccdef3a72508f5bc0a9f26d46dc27b7af82482534f54cd64dca042838e066a55c3af5c0db7ab5ec846d1cf6503e83286a90186f8e
-
SSDEEP
12288:f9ROobatyJZBEh6UB8mCoGEjM0Dhw0r5g2JP4Og1+J42y:f9EobtBA6UB8mC5WMKg2JAOlS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Lilkey EX.exe
Files
-
bd70f8576ffe9851b8174d25b24c37ba3d9adec182dfe2b864bac0ebd007605b.zip
-
IMPORTANTE! LEER pls.txt
-
Lilkey EX.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 611KB - Virtual size: 611KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ