vilsel | JaffaCakes118_3af7035ad458bacb24c2f31e81579c9f

General

Target
JaffaCakes118_3af7035ad458bacb24c2f31e81579c9f
Size 72KB
Sample251218-2ymztsslfr
SHA256 1a5858d1947e5a3dcd098276428d7ec09b537ec171b638797430220b5144822e
MD5 3af7035ad458bacb24c2f31e81579c9f
SHA1 12de4d7cf4c3484ab9396a6787fa0a9e708b43a4
SHA512 bd3469d9314d50067dd559d5656dd5ea855e09ba67d1fe921e529e2bbdff7e953b7dd3b4181a6893e0bcdce80d77522bf2ccad7db73e3a19706c126bc44abd8a
SSDEEP 384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2/:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3af7035ad458bacb24c2f31e81579c9f

IMPHASH 1639b1e17656fed4f63bac94cbb79cec
SHA256 1a5858d1947e5a3dcd098276428d7ec09b537ec171b638797430220b5144822e
MD5 3af7035ad458bacb24c2f31e81579c9f
SHA1 12de4d7cf4c3484ab9396a6787fa0a9e708b43a4
SHA512 bd3469d9314d50067dd559d5656dd5ea855e09ba67d1fe921e529e2bbdff7e953b7dd3b4181a6893e0bcdce80d77522bf2ccad7db73e3a19706c126bc44abd8a
SSDEEP 384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2/:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrT
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

4404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths