vilsel | JaffaCakes118_3eff5096207167d83ad47043fa772179

General

Target
JaffaCakes118_3eff5096207167d83ad47043fa772179
Size 72KB
Sample260103-k83dtsgl71
SHA256 50d41c9d4b6df6197c3ad1636dfd63267c2d37578ee837e8a8d9c818b4c2c5bf
MD5 3eff5096207167d83ad47043fa772179
SHA1 c0e98c4ebc235b95cee72316342b1b7b3bf8ed65
SHA512 35718b699bd02dd8d17f7e96ed433a6924339f5fbc6280059cfc30af7cc326c77cfa4754d1ec0ece9799f2b7b010b630d7c65016a8201a9995d2f5ed6e14d55c
SSDEEP 384:N6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KgxWb/83BXR+oGK:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3eff5096207167d83ad47043fa772179

IMPHASH bfbf457d52153d2191e67bb6c9212334
SHA256 50d41c9d4b6df6197c3ad1636dfd63267c2d37578ee837e8a8d9c818b4c2c5bf
MD5 3eff5096207167d83ad47043fa772179
SHA1 c0e98c4ebc235b95cee72316342b1b7b3bf8ed65
SHA512 35718b699bd02dd8d17f7e96ed433a6924339f5fbc6280059cfc30af7cc326c77cfa4754d1ec0ece9799f2b7b010b630d7c65016a8201a9995d2f5ed6e14d55c
SSDEEP 384:N6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KgxWb/83BXR+oGK:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrv
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

4432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths