jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]dpls[.]5785582506dccee289ad5650d1f6b0a8

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpls.5785582506dccee289ad5650d1f6b0a8
Size 104KB
Sample261014-ls51fsbt3m
SHA256 b4f6c3a0e35c1ea557ac28cf447ea93022e358896f303ad74704ce67c6006e1e
MD5 5785582506dccee289ad5650d1f6b0a8
SHA1 ad20aff28f6014b1b57b2159b4a4bd28e1e34f1f
SHA512 7cf2dc1e00bd94255c24baf7e8c7cd2e31c0773d2742711befb61f854ea3e17198adecd5500c96f445e6fa1341fd134c7cfbfd97b0272dec45acafea2b8fdd4f
SSDEEP 1536:J3iyDPFw2bprmjsKx+Nvt+dnIAiHNeoqyrhu+V1MuEFfwqJ/b4azwNkd:1Tw2bpCos+Nt+JriHlFt54MaM+d
TLSH
T1EFA3AF998115753BD33F853F99AA3E27493927B33C97604F972120963C76292AF06F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpls.5785582506dccee289ad5650d1f6b0a8

jaffacakes118_Trojan-PSW.Win32.Kykymber.dpls.5785582506dccee289ad5650d1f6b0a8

.dll 104KB

SHA256 b4f6c3a0e35c1ea557ac28cf447ea93022e358896f303ad74704ce67c6006e1e
MD5 5785582506dccee289ad5650d1f6b0a8
SHA1 ad20aff28f6014b1b57b2159b4a4bd28e1e34f1f
SHA512 7cf2dc1e00bd94255c24baf7e8c7cd2e31c0773d2742711befb61f854ea3e17198adecd5500c96f445e6fa1341fd134c7cfbfd97b0272dec45acafea2b8fdd4f
SSDEEP 1536:J3iyDPFw2bprmjsKx+Nvt+dnIAiHNeoqyrhu+V1MuEFfwqJ/b4azwNkd:1Tw2bpCos+Nt+JriHlFt54MaM+d
TLSH
T1EFA3AF998115753BD33F853F99AA3E27493927B33C97604F972120963C76292AF06F0B
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

18335

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths