jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]leh[.]398eecf76ed20d459c232b63004b9ea6

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.398eecf76ed20d459c232b63004b9ea6
Size 88KB
Sample261012-yxkarswx8q
SHA256 a7863e07500c2478f12294ece26581731d6be2cb1c2837f329ceb61ccc7029d7
MD5 398eecf76ed20d459c232b63004b9ea6
SHA1 5305799fd74406f5661a83c087c407620a60aaa0
SHA512 bf7fcbbac49988340b0ea2d6e183ed4f9d1df1960bdfbb720549390f56c5415524687c457b1ed7f045db83147b8094f147998da088bb6384ee240521151faa57
SSDEEP 1536:i64W3b/+sHTUxLuLvT8ceKfV4wLendlyJ3EUX1B:1b/+sHzr+EiGREUb
TLSH
T1FA93BF9D96157677D77B8936644D3E27423922F16C5BE00BA33310993CF32A2AB09F4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.398eecf76ed20d459c232b63004b9ea6

jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.398eecf76ed20d459c232b63004b9ea6

.dll 88KB

SHA256 a7863e07500c2478f12294ece26581731d6be2cb1c2837f329ceb61ccc7029d7
MD5 398eecf76ed20d459c232b63004b9ea6
SHA1 5305799fd74406f5661a83c087c407620a60aaa0
SHA512 bf7fcbbac49988340b0ea2d6e183ed4f9d1df1960bdfbb720549390f56c5415524687c457b1ed7f045db83147b8094f147998da088bb6384ee240521151faa57
SSDEEP 1536:i64W3b/+sHTUxLuLvT8ceKfV4wLendlyJ3EUX1B:1b/+sHzr+EiGREUb
TLSH
T1FA93BF9D96157677D77B8936644D3E27423922F16C5BE00BA33310993CF32A2AB09F4B
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18421

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths