jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]leh[.]2dbe8dfe6f8308d2b72eea0304b4c13f

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.2dbe8dfe6f8308d2b72eea0304b4c13f
Size 122KB
Sample261014-lt45jsbs2x
SHA256 790ca433e7aa41a9ea52c1b59ab27d59c9658979d28c708347c94cc5e6cc7d60
MD5 2dbe8dfe6f8308d2b72eea0304b4c13f
SHA1 1a24451ad1d887480668fbc5831d20fa9f3130c1
SHA512 ae73752be9aca45ea0e8ce9ab82412b87b90bf0eec5ff29b29121a8278171aff5487a0326fe493d1e81ee7489d109afe927ac30f79b35d45c528fd93664ccd26
SSDEEP 1536:MDEFUawhF/H8fO1qJ1Zfbs3VDGg7BI+vL9yIc3uTiga:j4D/caFKg7BTg3uc
TLSH
T172C3AE9AAA203433D73B8436A5AA3727423922B73D57A50BE731519E3C772D19F14F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.2dbe8dfe6f8308d2b72eea0304b4c13f

jaffacakes118_Trojan-PSW.Win32.Kykymber.leh.2dbe8dfe6f8308d2b72eea0304b4c13f

.dll 122KB

SHA256 790ca433e7aa41a9ea52c1b59ab27d59c9658979d28c708347c94cc5e6cc7d60
MD5 2dbe8dfe6f8308d2b72eea0304b4c13f
SHA1 1a24451ad1d887480668fbc5831d20fa9f3130c1
SHA512 ae73752be9aca45ea0e8ce9ab82412b87b90bf0eec5ff29b29121a8278171aff5487a0326fe493d1e81ee7489d109afe927ac30f79b35d45c528fd93664ccd26
SSDEEP 1536:MDEFUawhF/H8fO1qJ1Zfbs3VDGg7BI+vL9yIc3uTiga:j4D/caFKg7BTg3uc
TLSH
T172C3AE9AAA203433D73B8436A5AA3727423922B73D57A50BE731519E3C772D19F14F0B
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

21611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths