kawaiiunicorn | 692c023a46d77fedcb8165b6c26ead595c288c546c5931d4f5ac762a792d46fe

General

Target
692c023a46d77fedcb8165b6c26ead595c288c546c5931d4f5ac762a792d46fe
Size 468KB
Sample260826-pxdnjsdr2x
SHA256 692c023a46d77fedcb8165b6c26ead595c288c546c5931d4f5ac762a792d46fe
MD5 90253bdf57abe76693a6a4ff8301600e
SHA1 f7e0b094bdad48335a50db8281a0ae25d980ac48
SHA512 b72f684b5cfa32cd7e389e14599ba4ebb3a1d20b2be6fd038f8f23f2d691c2093052592079ed954cbf87816ccc75aa09273488312f6cfa3eb6c9c2e7a426a04a
SSDEEP 3072:i1pjVfUdaC8U5J/HPz5Fffy3/WVe+pdZamHxaVd+B2eNzGJhtOlT:i1JVP7U51P1Fff/75VB2yKJht
TLSH
T18FA4A5929C64AF46FE16453423A56EBA404E7D2F66E4421C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
trojan kawaiiunicorn

Detects KawaiiUnicorn 1 IoCs

resource	yara_rule
sample	family_kawaiiunicorn

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692c023a46d77fedcb8165b6c26ead595c288c546c5931d4f5ac762a792d46fe

IMPHASH 5d6cad172c5535e4b6b6bbd246571621
SHA256 692c023a46d77fedcb8165b6c26ead595c288c546c5931d4f5ac762a792d46fe
MD5 90253bdf57abe76693a6a4ff8301600e
SHA1 f7e0b094bdad48335a50db8281a0ae25d980ac48
SHA512 b72f684b5cfa32cd7e389e14599ba4ebb3a1d20b2be6fd038f8f23f2d691c2093052592079ed954cbf87816ccc75aa09273488312f6cfa3eb6c9c2e7a426a04a
SSDEEP 3072:i1pjVfUdaC8U5J/HPz5Fffy3/WVe+pdZamHxaVd+B2eNzGJhtOlT:i1JVP7U51P1Fff/75VB2yKJht
TLSH
T18FA4A5929C64AF46FE16453423A56EBA404E7D2F66E4421C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths