jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]dpcu[.]6e833959d74ea962c00e1132970aa1e7

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.6e833959d74ea962c00e1132970aa1e7
Size 101KB
Sample261014-lr7snabt2m
SHA256 3e9d765cd0b09fa68ee2221ca5a5cb282b00bb95aa119a0a4d6c7327560de80a
MD5 6e833959d74ea962c00e1132970aa1e7
SHA1 060342ca02cfdf61121ed560c2cb11ff79965a2e
SHA512 eec803f13a69b6ee8ab4180a4e473bfe9831ed6dafa5016f25d3bc57b454edef41209c628414492720df3175e4dbe7ab7feb793a240dea847b497fd30b15aa24
SSDEEP 1536:/xLK2OReR3CH2ufSUbAZq4MPLHOmxBpeHp1Oki+7vI0RNvuIFaTFH:ZVOReRyH2OXbCzMPD/x+J1cIzFaT9
TLSH
T1DAA3AE8D86157537D32FC93AA89A3B3A063A22F27957505FD73221D038761A2AF05F4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.6e833959d74ea962c00e1132970aa1e7

jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.6e833959d74ea962c00e1132970aa1e7

.dll 101KB

SHA256 3e9d765cd0b09fa68ee2221ca5a5cb282b00bb95aa119a0a4d6c7327560de80a
MD5 6e833959d74ea962c00e1132970aa1e7
SHA1 060342ca02cfdf61121ed560c2cb11ff79965a2e
SHA512 eec803f13a69b6ee8ab4180a4e473bfe9831ed6dafa5016f25d3bc57b454edef41209c628414492720df3175e4dbe7ab7feb793a240dea847b497fd30b15aa24
SSDEEP 1536:/xLK2OReR3CH2ufSUbAZq4MPLHOmxBpeHp1Oki+7vI0RNvuIFaTFH:ZVOReRyH2OXbCzMPD/x+J1cIzFaT9
TLSH
T1DAA3AE8D86157537D32FC93AA89A3B3A063A22F27957505FD73221D038761A2AF05F4F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths