jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]dpcu[.]d0f4e9226e5b346920bb755a5bedfda8

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.d0f4e9226e5b346920bb755a5bedfda8
Size 103KB
Sample261014-lsbrlsa171
SHA256 92f3783dcc24c9f891d4f37c5a9e3528ebf191195f5d199f1edad7c7eb05a989
MD5 d0f4e9226e5b346920bb755a5bedfda8
SHA1 9d9dd4f9a71cbaf96decea9e32a98aca67d97815
SHA512 8bbecaa3b3a523fde760c304c0d9f36f7ed1b5145e04d7f5220205f54620ccbbc89b77797c049ae26b2e4e8624127629196b118a4b724cb6010d94cc76d5e863
SSDEEP 1536:/xLK2OReR3CHxNSXnMiQfqdpVSxF1jTYO+Rfdjn04OiP:ZVOReRyHxNDinVS9jTkRFbCiP
TLSH
T1A4A3AF8945256536D37B863A999A3E2B463A13F37D4BA09F973220C53875093BF05F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.d0f4e9226e5b346920bb755a5bedfda8

jaffacakes118_Trojan-PSW.Win32.Kykymber.dpcu.d0f4e9226e5b346920bb755a5bedfda8

.dll 103KB

SHA256 92f3783dcc24c9f891d4f37c5a9e3528ebf191195f5d199f1edad7c7eb05a989
MD5 d0f4e9226e5b346920bb755a5bedfda8
SHA1 9d9dd4f9a71cbaf96decea9e32a98aca67d97815
SHA512 8bbecaa3b3a523fde760c304c0d9f36f7ed1b5145e04d7f5220205f54620ccbbc89b77797c049ae26b2e4e8624127629196b118a4b724cb6010d94cc76d5e863
SSDEEP 1536:/xLK2OReR3CHxNSXnMiQfqdpVSxF1jTYO+Rfdjn04OiP:ZVOReRyHxNDinVS9jTkRFbCiP
TLSH
T1A4A3AF8945256536D37B863A999A3E2B463A13F37D4BA09F973220C53875093BF05F0B
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths