vilsel | jaffacakes118_Trojan[.]Win32[.]Vilsel[.]bpxe[.]4449297a3095bbaf7c39714dd90047ef

General

Target
jaffacakes118_Trojan.Win32.Vilsel.bpxe.4449297a3095bbaf7c39714dd90047ef
Size 72KB
Sample261014-mxhamaby4s
SHA256 1e77eb4bf544f8c9ac2e7ff0b5b8e6d5b67e97649554c946d76f8ed397b5e634
MD5 4449297a3095bbaf7c39714dd90047ef
SHA1 13ac7a3944cd30b495b83839e82c30ca98f71f9f
SHA512 0b1f520d35a7c3efefb86d6be25724bfeb8f37f48e809fc7b656c311f87e57ce85ee9564a79f6f8e9d63bd2fbde468e3a9522f72d8758a47ec9fc40000dd6fc3
SSDEEP 768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRr9v:teThavEjDWguK9v
TLSH
T16A73D543B752C591F64A6279688383B96793FD70AE027A075150FF3F3AB39A04D91B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Vilsel.bpxe.4449297a3095bbaf7c39714dd90047ef

jaffacakes118_Trojan.Win32.Vilsel.bpxe.4449297a3095bbaf7c39714dd90047ef

.exe 72KB

IMPHASH 1639b1e17656fed4f63bac94cbb79cec
SHA256 1e77eb4bf544f8c9ac2e7ff0b5b8e6d5b67e97649554c946d76f8ed397b5e634
MD5 4449297a3095bbaf7c39714dd90047ef
SHA1 13ac7a3944cd30b495b83839e82c30ca98f71f9f
SHA512 0b1f520d35a7c3efefb86d6be25724bfeb8f37f48e809fc7b656c311f87e57ce85ee9564a79f6f8e9d63bd2fbde468e3a9522f72d8758a47ec9fc40000dd6fc3
SSDEEP 768:rpQNwC3BEc4QEfu0Ei8XxNDINE3BEJwRr9v:teThavEjDWguK9v
TLSH
T16A73D543B752C591F64A6279688383B96793FD70AE027A075150FF3F3AB39A04D91B32
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths