Hullex_Dumper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hullex_Dumper.exe
Size

951KB
MD5

59bb4fac20bf7b3e2061e3a7f999d241
SHA1

01d5769df41a4b57d8f7f585f4addf411d86a37e
SHA256

b48e8c9f1f4ace78ad43213fa4d6550d5bacd0788e224d3239ccb0c968790ee1
SHA512

29580488e8811acf979d8f1c4843237e5ff970caa9002ae90b8b862620a3c0f565613798539a4a5b6a4bb46e48655e983c9c7b484f4585da11b2eedc8299c50d
SSDEEP

24576:lJCITMvRFhRRbNWoCfkYSEH3OqtwIuX8:SITYbNbNWo4kSH3OqtwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hullex_Dumper.exe

Files

Hullex_Dumper.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Desktop\WRLD-Solutions-DEBUGGER\nword\obj\x64\Release\Hullex Dumper.pdb

Sections

.text
Size: 946KB - Virtual size: 946KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ