Categories: Trojan

IL:Trojan.MSILZilla.18064 information

The IL:Trojan.MSILZilla.18064 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.18064 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Creates RWX memory
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine IL:Trojan.MSILZilla.18064?


File Info:
name: 98838AF9D40F1DA3A531.mlwpath: /opt/CAPEv2/storage/binaries/04080573e133a48c10b8f676ee17c4147033c1b937ae3937e60202c7734ad18fcrc32: CED780AFmd5: 98838af9d40f1da3a5319bdb12e0bce8sha1: d52f1f2be7375eb56b3020f8794a20128f736a15sha256: 04080573e133a48c10b8f676ee17c4147033c1b937ae3937e60202c7734ad18fsha512: 28c2f11ba6628942bd305b7d4aac2e4a6c9c8018bfdb5297a265b348ef70007054dd215fd71ccb318800b932948846b21e821406000aa638bec917cb1b4c10eassdeep: 12288:aFKWoccpVnCXcxwkMdOWQtXs4xRw5FxzPebtFmcxDr:aYFVzCXcxVFW+RwX92btFtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12AB46C0CBAE6F625DA68433685E2D5184173BD11BA07FB6BBDD137EE0E30798C086917sha3_384: f62a1e5b39ba824c6bbee5ef5c04c7d1003977b7203a95f32e287bfa65143ad4fe65908478c2eebf3898eb077b6fa62dep_bytes: ff250020400000000000000000000000timestamp: 2022-03-06 22:43:06
Version Info:
Translation: 0x0409 0x04e4FileDescription: Resource viewer, decompiler & recompilerFileVersion: 4.5.30.180InternalName: ResHackLegalCopyright: (c) Angus Johnson 1999-2016OriginalFilename: ResHackProductVersion: 4.5.0.0Assembly Version: 0.0.0.0CompanyName: Angus Johnson

IL:Trojan.MSILZilla.18064 also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	IL:Trojan.MSILZilla.18064
ALYac	IL:Trojan.MSILZilla.18064
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.be7375
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Packed.MultiPacked.Z
APEX	Malicious
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
BitDefender	IL:Trojan.MSILZilla.18064
Avast	MSIL:GenMalicious-AZQ [Trj]
Ad-Aware	IL:Trojan.MSILZilla.18064
Emsisoft	IL:Trojan.MSILZilla.18064 (B)
F-Secure	Heuristic.HEUR/AGEN.1235976
McAfee-GW-Edition	RDN/Generic.rp
FireEye	Generic.mg.98838af9d40f1da3
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	IL:Trojan.MSILZilla.18064
Avira	HEUR/AGEN.1235976
MAX	malware (ai score=87)
Arcabit	IL:Trojan.MSILZilla.D4690
ZoneAlarm	HEUR:Trojan.MSIL.Crypt.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Disfa.C4983858
McAfee	RDN/Generic.rp
Ikarus	Trojan.MSIL.MultiPacked
BitDefenderTheta	Gen:NN.ZemsilF.34606.Gm0@ayFuCogi
AVG	MSIL:GenMalicious-AZQ [Trj]
CrowdStrike	win/malicious_confidence_90% (D)