vilsel | jaffacakes118_Trojan[.]Win32[.]Vilsel[.]bpxe[.]f9edc0b7b6c93d537e416573459d0eac

General

Target
jaffacakes118_Trojan.Win32.Vilsel.bpxe.f9edc0b7b6c93d537e416573459d0eac
Size 72KB
Sample261012-m436nscc42
SHA256 1c7b7680b14a64f7fd4b221c395a976c48f65c368b4dcdb5378ec4c277285f7a
MD5 f9edc0b7b6c93d537e416573459d0eac
SHA1 095893653d605e4f331fc1536b3842a8fc248377
SHA512 e1a53c362ea5cb532eab956a0eafad547580fe610dcd73a6ea7a9515f4da744fc12c9ca5ec1f84ef3711cbe76562df093c3874103a20360669e7ef3be4bfcc24
SSDEEP 768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRrCu:teThavEjDWguKCu
TLSH
T17773D543B752C591F64A6279688383B96793FD70AE027A075150FF3F3AB39A04D91B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Vilsel.bpxe.f9edc0b7b6c93d537e416573459d0eac

jaffacakes118_Trojan.Win32.Vilsel.bpxe.f9edc0b7b6c93d537e416573459d0eac

.exe 72KB

IMPHASH 1639b1e17656fed4f63bac94cbb79cec
SHA256 1c7b7680b14a64f7fd4b221c395a976c48f65c368b4dcdb5378ec4c277285f7a
MD5 f9edc0b7b6c93d537e416573459d0eac
SHA1 095893653d605e4f331fc1536b3842a8fc248377
SHA512 e1a53c362ea5cb532eab956a0eafad547580fe610dcd73a6ea7a9515f4da744fc12c9ca5ec1f84ef3711cbe76562df093c3874103a20360669e7ef3be4bfcc24
SSDEEP 768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRrCu:teThavEjDWguKCu
TLSH
T17773D543B752C591F64A6279688383B96793FD70AE027A075150FF3F3AB39A04D91B32
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths