vilsel | d3aa1687f122f9800942cf22afc60b1453bfa28485f1d76749ce71a4a4aba380

General

Target
d3aa1687f122f9800942cf22afc60b1453bfa28485f1d76749ce71a4a4aba380
Size 86KB
Sample260828-sd87wsdd44
SHA256 d3aa1687f122f9800942cf22afc60b1453bfa28485f1d76749ce71a4a4aba380
MD5 cb52d2d63edbb04588a604ad8503f9fc
SHA1 0c9b78265d4f1959d5026c20f442ec9a51924d28
SHA512 f468aedee32da263c83cab6ccd9598d092295ad84dd72d08855d43ad938e8a6c15f60cb8acc77614252ffa77774de32a178df46e2de7f0b2fd2fd86e6313fc2a
SSDEEP 768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmq9:8vm1AeT7BVwxfvLFwjRq9
TLSH
T1B2831843B752C581F28AA275688383B96653FD30AF127A075164FF3F3AB39614E51F22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx trojan vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3aa1687f122f9800942cf22afc60b1453bfa28485f1d76749ce71a4a4aba380

SHA256 d3aa1687f122f9800942cf22afc60b1453bfa28485f1d76749ce71a4a4aba380
MD5 cb52d2d63edbb04588a604ad8503f9fc
SHA1 0c9b78265d4f1959d5026c20f442ec9a51924d28
SHA512 f468aedee32da263c83cab6ccd9598d092295ad84dd72d08855d43ad938e8a6c15f60cb8acc77614252ffa77774de32a178df46e2de7f0b2fd2fd86e6313fc2a
SSDEEP 768:8qnum1opQNwC3BESe4Vqth+0V5vKPyLylze70wi3BEmq9:8vm1AeT7BVwxfvLFwjRq9
TLSH
T1B2831843B752C581F28AA275688383B96653FD30AF127A075164FF3F3AB39614E51F22
MD5 SHA1 SHA512 SSDEEP TLSH

Detects Vilsel trojan
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths