kawaiiunicorn | a94242a66141a77a03536f1bd4f157a15e3761d1b41824ba0c3c0451de38b747

General

Target
a94242a66141a77a03536f1bd4f157a15e3761d1b41824ba0c3c0451de38b747
Size 184KB
Sample260827-l291rssfmd
SHA256 a94242a66141a77a03536f1bd4f157a15e3761d1b41824ba0c3c0451de38b747
MD5 53b98da35526e35fa8b7a4000a87ce8e
SHA1 dcd1fd187ab7596889c31b2eb95859e1c231822a
SHA512 237d97a1cffb0ab8e4801b515b9c1d77425055c702dea07ab0c80c848da01547cab8ea9e4e7f9b99c96ef07ef447aea6a61312ce3d6437db987bc9723e9e2fd7
SSDEEP 3072:ngahozZIfMAfukjjdliOb8Ls2586/+fhjyUxLHIphNlPvpFc:ngYoStfuCdoOb8cJFENlPvpF
TLSH
T199048F629970BB16E915497817A06BFA001D3C2F47E9030DBCADDE5F3353DAA34AF942
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
trojan kawaiiunicorn

Detects KawaiiUnicorn 1 IoCs

resource	yara_rule
sample	family_kawaiiunicorn

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a94242a66141a77a03536f1bd4f157a15e3761d1b41824ba0c3c0451de38b747

IMPHASH ca99f9b06ba0b7332b250e7fed16b197
SHA256 a94242a66141a77a03536f1bd4f157a15e3761d1b41824ba0c3c0451de38b747
MD5 53b98da35526e35fa8b7a4000a87ce8e
SHA1 dcd1fd187ab7596889c31b2eb95859e1c231822a
SHA512 237d97a1cffb0ab8e4801b515b9c1d77425055c702dea07ab0c80c848da01547cab8ea9e4e7f9b99c96ef07ef447aea6a61312ce3d6437db987bc9723e9e2fd7
SSDEEP 3072:ngahozZIfMAfukjjdliOb8Ls2586/+fhjyUxLHIphNlPvpFc:ngYoStfuCdoOb8cJFENlPvpF
TLSH
T199048F629970BB16E915497817A06BFA001D3C2F47E9030DBCADDE5F3353DAA34AF942
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths