jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]kzn[.]4ad04430ca8b64ea154f342771b00bad

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.kzn.4ad04430ca8b64ea154f342771b00bad
Size 100KB
Sample261006-vgfe4aa19w
SHA256 cdcaed01d5534809672cfa24d12de90efd615ed10c742a8bb1f550e1a94ee8ec
MD5 4ad04430ca8b64ea154f342771b00bad
SHA1 29d32064031d7656f574f9426d713d3a98a71904
SHA512 6a361c644eee18d2b427c197de2d5cee6aa5d9d2404b151208a72cb650754409e24f6e8968ef83019d56fea0dc25a670abac9f1d86f8413a8f06166b7006b7df
SSDEEP 1536:zMHSIHT9yM8vKOsplwM9P+a4rx9Y/ZJohHk7JLdpWX:z1QT0hvKOylwM9ma4rx9YbohGJLd4
TLSH
T1B6A3BFD95612713BD37B893B989A3A27493922B27D57605FC33221893CB62E19F05F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.kzn.4ad04430ca8b64ea154f342771b00bad

jaffacakes118_Trojan-PSW.Win32.Kykymber.kzn.4ad04430ca8b64ea154f342771b00bad

.dll 100KB

SHA256 cdcaed01d5534809672cfa24d12de90efd615ed10c742a8bb1f550e1a94ee8ec
MD5 4ad04430ca8b64ea154f342771b00bad
SHA1 29d32064031d7656f574f9426d713d3a98a71904
SHA512 6a361c644eee18d2b427c197de2d5cee6aa5d9d2404b151208a72cb650754409e24f6e8968ef83019d56fea0dc25a670abac9f1d86f8413a8f06166b7006b7df
SSDEEP 1536:zMHSIHT9yM8vKOsplwM9P+a4rx9Y/ZJohHk7JLdpWX:z1QT0hvKOylwM9ma4rx9YbohGJLd4
TLSH
T1B6A3BFD95612713BD37B893B989A3A27493922B27D57605FC33221893CB62E19F05F0F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths