kawaiiunicorn | 66ad3769840922f2bfe842ec1cd7304a05fdca13881b4e4c3960c926b5069201

General

Target
66ad3769840922f2bfe842ec1cd7304a05fdca13881b4e4c3960c926b5069201
Size 468KB
Sample260916-kfw2caac28
SHA256 66ad3769840922f2bfe842ec1cd7304a05fdca13881b4e4c3960c926b5069201
MD5 57315b5f754d494027782965d446eaba
SHA1 ec189b233af00c6581aca31acb767d7d02f753b1
SHA512 c9c89d1e963159f966791efd8425789e52d90f2645297c1239c9a66180dbfcfc48fb948da28101acb93e0dacdcd6b7993ee3eae66ac7c6aa9722353803e3555d
SSDEEP 3072:pJB4EgzVIE5ptbYxPg2j7f8//CfTTLpcNmHe1bJHEpsTqYA2Aylc:pJKETMptWPrj7f11EzEpS7A2A
TLSH
T14FA494929C64AF45FE16453427956EBA004E7D2FA6E4422C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
trojan kawaiiunicorn

Detects KawaiiUnicorn 1 IoCs

resource	yara_rule
sample	family_kawaiiunicorn

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66ad3769840922f2bfe842ec1cd7304a05fdca13881b4e4c3960c926b5069201

IMPHASH 5d6cad172c5535e4b6b6bbd246571621
SHA256 66ad3769840922f2bfe842ec1cd7304a05fdca13881b4e4c3960c926b5069201
MD5 57315b5f754d494027782965d446eaba
SHA1 ec189b233af00c6581aca31acb767d7d02f753b1
SHA512 c9c89d1e963159f966791efd8425789e52d90f2645297c1239c9a66180dbfcfc48fb948da28101acb93e0dacdcd6b7993ee3eae66ac7c6aa9722353803e3555d
SSDEEP 3072:pJB4EgzVIE5ptbYxPg2j7f8//CfTTLpcNmHe1bJHEpsTqYA2Aylc:pJKETMptWPrj7f11EzEpS7A2A
TLSH
T14FA494929C64AF45FE16453427956EBA004E7D2FA6E4422C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths