kawaiiunicorn | 95cb6f6e7e2419b26461f36b898d18ea35b0d07bc1397bed4fa66228813ec04b

General

Target
95cb6f6e7e2419b26461f36b898d18ea35b0d07bc1397bed4fa66228813ec04b
Size 468KB
Sample260916-tfcgdasfjf
SHA256 95cb6f6e7e2419b26461f36b898d18ea35b0d07bc1397bed4fa66228813ec04b
MD5 cb5fee3b32073ca61109db4a09d014e9
SHA1 c885b7539b542e367a47641b61310f0240cbd314
SHA512 55ca3f8b47f3265d5e7f3b38f82e4c1fcef5ba13522a7b29f6ab0ea131ce6453b4d9671d130616aaf673bf9cb08960c965fcb77e03d1578d8df2a36f164e8180
SSDEEP 3072:u4QnoYZ1TI08Un7/YPb4fafhlkUGeDhvg/H4/j/QTv5Y02Bni7lk:u4Mox5UnUPMfaf7tDsTvmDBni
TLSH
T115A4A5929C64AF46FE16453423A56EBA404E7D2F66E4421C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: KawaiiUnicorn
KawaiiUnicorn is a trojan written in Visual Basic.
trojan kawaiiunicorn

Detects KawaiiUnicorn 1 IoCs

resource	yara_rule
sample	family_kawaiiunicorn

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95cb6f6e7e2419b26461f36b898d18ea35b0d07bc1397bed4fa66228813ec04b

IMPHASH 5d6cad172c5535e4b6b6bbd246571621
SHA256 95cb6f6e7e2419b26461f36b898d18ea35b0d07bc1397bed4fa66228813ec04b
MD5 cb5fee3b32073ca61109db4a09d014e9
SHA1 c885b7539b542e367a47641b61310f0240cbd314
SHA512 55ca3f8b47f3265d5e7f3b38f82e4c1fcef5ba13522a7b29f6ab0ea131ce6453b4d9671d130616aaf673bf9cb08960c965fcb77e03d1578d8df2a36f164e8180
SSDEEP 3072:u4QnoYZ1TI08Un7/YPb4fafhlkUGeDhvg/H4/j/QTv5Y02Bni7lk:u4Mox5UnUPMfaf7tDsTvmDBni
TLSH
T115A4A5929C64AF46FE16453423A56EBA404E7D2F66E4421C785CFA0B337399730AFD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths