kawaiiunicorn | d6c5f3d9d0f5b5cd1efac19cc7b291da5eec9194d3823e9bd01d27fa0755e522

General

Target
d6c5f3d9d0f5b5cd1efac19cc7b291da5eec9194d3823e9bd01d27fa0755e522
Size 468KB
Sample260827-l4trkasfpc
SHA256 d6c5f3d9d0f5b5cd1efac19cc7b291da5eec9194d3823e9bd01d27fa0755e522
MD5 fe6402a0fe822f6d5b618ff5cd5a34bd
SHA1 b8af848e7b48435067a8afa58f68eb057e708fcb
SHA512 20407172d4f30a828692c131cd4639a41f6fbb97fe7a66d97d7f24ba3cb03c4de4b65777bf5aa65a5e6af0db927da11f36a238b160887034a1b61facb15f3a08
SSDEEP 3072:mqrkVU7NajVEOQ/HPqQgdfyz2J1j/8Gb+HgQinunWr2GBbY6j5Wlr:mqIVRpEOuPHgdfZUO+Wr2+06j5
TLSH
T17EA4A5929C64AF45FE16453423956EBA004E7D2F66E4422C785DFA0B337399B30AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
trojan kawaiiunicorn

Detects KawaiiUnicorn 1 IoCs

resource	yara_rule
sample	family_kawaiiunicorn

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c5f3d9d0f5b5cd1efac19cc7b291da5eec9194d3823e9bd01d27fa0755e522

IMPHASH 5d6cad172c5535e4b6b6bbd246571621
SHA256 d6c5f3d9d0f5b5cd1efac19cc7b291da5eec9194d3823e9bd01d27fa0755e522
MD5 fe6402a0fe822f6d5b618ff5cd5a34bd
SHA1 b8af848e7b48435067a8afa58f68eb057e708fcb
SHA512 20407172d4f30a828692c131cd4639a41f6fbb97fe7a66d97d7f24ba3cb03c4de4b65777bf5aa65a5e6af0db927da11f36a238b160887034a1b61facb15f3a08
SSDEEP 3072:mqrkVU7NajVEOQ/HPqQgdfyz2J1j/8Gb+HgQinunWr2GBbY6j5Wlr:mqIVRpEOuPHgdfZUO+Wr2+06j5
TLSH
T17EA4A5929C64AF45FE16453423956EBA004E7D2F66E4422C785DFA0B337399B30AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths