kawaiiunicorn | 477ce35e14f8c9884091bdb1a85c3c88afb3591f958b1c7f1b530299d11e31ba

General

Target
477ce35e14f8c9884091bdb1a85c3c88afb3591f958b1c7f1b530299d11e31ba
Size 468KB
Sample260830-1yn2fsszfx
SHA256 477ce35e14f8c9884091bdb1a85c3c88afb3591f958b1c7f1b530299d11e31ba
MD5 dfbe9573b43633b25118e6a76149b737
SHA1 80488373c977de9bbc2a2a6c7e2029b31eb9cf0b
SHA512 0377bda17413ed282c5afed9b3d64979322b0bea0b28444ea1052637af9f10246417de7bcce4d8ccebb195af50e2d40be97fb8e2956a65254b0ff0dd7564fba3
SSDEEP 3072:fim/oILEVI+8Un7/SPb46afhcfhpW08hnmHw0N3co/PbnDlS5795:fiqoAPUn2PM6afFtlvo/TDlS5
TLSH
T136A4A5929C64AF46FE16453423A56EBA404E7D2F66E4421C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
trojan kawaiiunicorn

Detects KawaiiUnicorn 1 IoCs

resource	yara_rule
sample	family_kawaiiunicorn

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
477ce35e14f8c9884091bdb1a85c3c88afb3591f958b1c7f1b530299d11e31ba

IMPHASH 5d6cad172c5535e4b6b6bbd246571621
SHA256 477ce35e14f8c9884091bdb1a85c3c88afb3591f958b1c7f1b530299d11e31ba
MD5 dfbe9573b43633b25118e6a76149b737
SHA1 80488373c977de9bbc2a2a6c7e2029b31eb9cf0b
SHA512 0377bda17413ed282c5afed9b3d64979322b0bea0b28444ea1052637af9f10246417de7bcce4d8ccebb195af50e2d40be97fb8e2956a65254b0ff0dd7564fba3
SSDEEP 3072:fim/oILEVI+8Un7/SPb46afhcfhpW08hnmHw0N3co/PbnDlS5795:fiqoAPUn2PM6afFtlvo/TDlS5
TLSH
T136A4A5929C64AF46FE16453423A56EBA404E7D2F66E4421C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths