vilsel | jaffacakes118_Trojan[.]Win32[.]Vilsel[.]bpxe[.]5625465f868ae3bacf0a4b7129049faf

General

Target
jaffacakes118_Trojan.Win32.Vilsel.bpxe.5625465f868ae3bacf0a4b7129049faf
Size 72KB
Sample261014-mxt97aby4z
SHA256 c83bf8d768b4735201928a48f95581a1756b2f2fbae1574e8b4b2bee84900930
MD5 5625465f868ae3bacf0a4b7129049faf
SHA1 e7faf0c780245709dc2e0f5825d5391e7bed9fb0
SHA512 8fd45401e1b7973ff784422d36ed6650615f4febf95410b984d351c1eb91d5deb6ff2bc6a752860ccf2821cd60451079e4c73a9e78f85035e46217054c6db31c
SSDEEP 384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2u:ipQNwC3BEddsEqOt/hyJF+x3BEJwRri
TLSH
T1D973D643B792C680F5496179688387A96793FD70AE037A075150FF3F3AB39A04E91B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan vilsel

Detects Vilsel trojan 1 IoCs

resource	yara_rule
sample	family_vilsel

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Vilsel.bpxe.5625465f868ae3bacf0a4b7129049faf

jaffacakes118_Trojan.Win32.Vilsel.bpxe.5625465f868ae3bacf0a4b7129049faf

.exe 72KB

IMPHASH 1639b1e17656fed4f63bac94cbb79cec
SHA256 c83bf8d768b4735201928a48f95581a1756b2f2fbae1574e8b4b2bee84900930
MD5 5625465f868ae3bacf0a4b7129049faf
SHA1 e7faf0c780245709dc2e0f5825d5391e7bed9fb0
SHA512 8fd45401e1b7973ff784422d36ed6650615f4febf95410b984d351c1eb91d5deb6ff2bc6a752860ccf2821cd60451079e4c73a9e78f85035e46217054c6db31c
SSDEEP 384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2u:ipQNwC3BEddsEqOt/hyJF+x3BEJwRri
TLSH
T1D973D643B792C680F5496179688387A96793FD70AE037A075150FF3F3AB39A04E91B32
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths