jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]dpcu[.]27eb1920005b5abbbd551d8663b2a74d

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.27eb1920005b5abbbd551d8663b2a74d
Size 95KB
Sample261012-yvv99aex21
SHA256 2e286699c12e330ec74d734a86827bf092f5b81af57a79f80d6c812580cada17
MD5 27eb1920005b5abbbd551d8663b2a74d
SHA1 b72d687df1dcdd7820fd31934e5537d6dd3421a9
SHA512 07183ae5372ee6f5896ed971c13ab4a5f1c61f2402d34b574f30e4ffa48c28c411f41b906ff0a1c4b37f8fa70f9121da20d88061882c0620fa5652197bc565ab
SSDEEP 1536:/xLK2OReR3CHhmNqnBxmEFzYqPpIPjWG5LufY:ZVOReRyHcaBoEFVPKP6G56w
TLSH
T15E93AE9D99156A36D37BCA32699A3A370C3D22B23D57106BE33211C63973192BB05F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.27eb1920005b5abbbd551d8663b2a74d

jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.27eb1920005b5abbbd551d8663b2a74d

.dll 95KB

SHA256 2e286699c12e330ec74d734a86827bf092f5b81af57a79f80d6c812580cada17
MD5 27eb1920005b5abbbd551d8663b2a74d
SHA1 b72d687df1dcdd7820fd31934e5537d6dd3421a9
SHA512 07183ae5372ee6f5896ed971c13ab4a5f1c61f2402d34b574f30e4ffa48c28c411f41b906ff0a1c4b37f8fa70f9121da20d88061882c0620fa5652197bc565ab
SSDEEP 1536:/xLK2OReR3CHhmNqnBxmEFzYqPpIPjWG5LufY:ZVOReRyHcaBoEFVPKP6G56w
TLSH
T15E93AE9D99156A36D37BCA32699A3A370C3D22B23D57106BE33211C63973192BB05F0F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths