Static task
static1
Behavioral task
behavioral1
Sample
ILProtector.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
ILProtector.exe
Resource
win10v2004-20240802-en
General
-
Target
ILProtector.exe
-
Size
3.5MB
-
MD5
4499a35528f90eed83deea535026de1e
-
SHA1
3955ee27d5e08a97b55da53320b617b1f5ca7a7c
-
SHA256
7547d3fc32bd13986bdfa363c59b57766e0cc144e124ad1a54306f7ed7a16c0f
-
SHA512
6c75630bacd0c10403c3bde6abf5b334680bbbd68a68db58eaca47876d1468ea80ae7af5630c27c471d089e2183c4ddd008d37517ae29be66ffd78e25976028b
-
SSDEEP
49152:E4jbEQ8rZwFB5CuMO5pe5vm7uRfbQswUZcSByYGv5utzkP:DbE4/ff7ul57zI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ILProtector.exe
Files
-
ILProtector.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ