vilsel | JaffaCakes118_3ebbfac4741af8d2065afeb930d8701f

General

Target
JaffaCakes118_3ebbfac4741af8d2065afeb930d8701f
Size 72KB
Sample260102-pm114afp2s
SHA256 bfe097f52b8a27e608763b721fb5acefa02f66e42af07fa760b025cd3dd83b89
MD5 3ebbfac4741af8d2065afeb930d8701f
SHA1 7e504f18cba1b8564a7384b8a25b176154593811
SHA512 2dd5f34b7651019560536f4864c5e33912e2880a9e4eaad598cd7369546386a4f2e18cb8c533fc44c4a84f67b29b2e2e909546df8d585327570c00c754b40585
SSDEEP 768:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrTd/+I9U:HeT7BVwxfvqguKp+SU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3ebbfac4741af8d2065afeb930d8701f

IMPHASH bfbf457d52153d2191e67bb6c9212334
SHA256 bfe097f52b8a27e608763b721fb5acefa02f66e42af07fa760b025cd3dd83b89
MD5 3ebbfac4741af8d2065afeb930d8701f
SHA1 7e504f18cba1b8564a7384b8a25b176154593811
SHA512 2dd5f34b7651019560536f4864c5e33912e2880a9e4eaad598cd7369546386a4f2e18cb8c533fc44c4a84f67b29b2e2e909546df8d585327570c00c754b40585
SSDEEP 768:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrTd/+I9U:HeT7BVwxfvqguKp+SU
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

4432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths