vilsel | JaffaCakes118_3ec47358b95ac0f504655d959ef290e5

General

Target
JaffaCakes118_3ec47358b95ac0f504655d959ef290e5
Size 72KB
Sample260102-qxdtzsvmck
SHA256 5006c2f065f309f0b8fcaa94114a6c4062b8a66736cd4d0e1137b7f1422b7e63
MD5 3ec47358b95ac0f504655d959ef290e5
SHA1 8a5ab79abc3f1c49f805d90b17b0daf44a09136a
SHA512 b8a3566695a45234fedf434e95e9d7ddcd87bb1b032f79187ae1149a18c3fc19121a837b3908add53fa6908d999aaeb45a270c2e5914f267826c8afdcc42d9af
SSDEEP 384:N6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KgxWb/83BXR+oGp:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrs
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3ec47358b95ac0f504655d959ef290e5

IMPHASH bfbf457d52153d2191e67bb6c9212334
SHA256 5006c2f065f309f0b8fcaa94114a6c4062b8a66736cd4d0e1137b7f1422b7e63
MD5 3ec47358b95ac0f504655d959ef290e5
SHA1 8a5ab79abc3f1c49f805d90b17b0daf44a09136a
SHA512 b8a3566695a45234fedf434e95e9d7ddcd87bb1b032f79187ae1149a18c3fc19121a837b3908add53fa6908d999aaeb45a270c2e5914f267826c8afdcc42d9af
SSDEEP 384:N6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KgxWb/83BXR+oGp:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrs
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

4432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths