jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]leh[.]76c1319ff4720702ccecfdf4e8f4e19d

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.76c1319ff4720702ccecfdf4e8f4e19d
Size 132KB
Sample261012-yxvrhaef32
SHA256 197e92b10922e6324ff6d148c3119fc8bb48e0516eea81469686587dad209906
MD5 76c1319ff4720702ccecfdf4e8f4e19d
SHA1 676260f1036dc174b4c6fa26805a3ec6f8be080e
SHA512 c5fbcd013d5716d7a6d587dd9b03b3a9843406e77cd079776dd2c2f4ae49a7be5c4f125fee2465f8cb711a1328fee354e4f80638a1c0d9a2a8e43a64dd20eadf
SSDEEP 1536:MDEFUawhF/H8fO6c2ZH4gfQRu/2nt36QUIke5yFas8aazn:j4D/cc2qgdOn5L5yFaRaqn
TLSH
T199D3AF9A9A142533D7BBC837A49A3B17463A22B23D07644FD336258A3C771D29B05F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.76c1319ff4720702ccecfdf4e8f4e19d

jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.76c1319ff4720702ccecfdf4e8f4e19d

.dll 132KB

SHA256 197e92b10922e6324ff6d148c3119fc8bb48e0516eea81469686587dad209906
MD5 76c1319ff4720702ccecfdf4e8f4e19d
SHA1 676260f1036dc174b4c6fa26805a3ec6f8be080e
SHA512 c5fbcd013d5716d7a6d587dd9b03b3a9843406e77cd079776dd2c2f4ae49a7be5c4f125fee2465f8cb711a1328fee354e4f80638a1c0d9a2a8e43a64dd20eadf
SSDEEP 1536:MDEFUawhF/H8fO6c2ZH4gfQRu/2nt36QUIke5yFas8aazn:j4D/cc2qgdOn5L5yFaRaqn
TLSH
T199D3AF9A9A142533D7BBC837A49A3B17463A22B23D07644FD336258A3C771D29B05F0F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

21611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths