Behavioral task
behavioral1
Sample
hilolxdbyelol.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
hilolxdbyelol.exe
Resource
win10v2004-20241007-en
General
-
Target
hilolxdbyelol.exe
-
Size
3.2MB
-
MD5
201b62987a6448b1ed7d4c7c634e4401
-
SHA1
3f9f029737bc56e4a23b8a64d6603856b3c16f0a
-
SHA256
2f0a0e4dff70b193c9f6766675be03126bcf1c796781d04714ccb5443942afd9
-
SHA512
decd1598075057f25db2d8e719917622d6b7dffd24529b9aba60952d8768d4e159e48aa91fba46c44e8c38c5aa37240b7f489dac5a10ba0740a7b44f009367cb
-
SSDEEP
49152:sZIS5uiyrDVujrZ7Ja+OMDQAf5rIQUlIne5fMlg7l3VzIlXs+FMOiJCxu499:ep5arDwdjOMQAf53emlgp39GXFFMq
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource hilolxdbyelol.exe
Files
-
hilolxdbyelol.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE