jaffacakes118_Trojan-PSW[.]Win32[.]Kykymber[.]dpnr[.]1f365ef58f155a3d5d3162bded197387

General

Target
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpnr.1f365ef58f155a3d5d3162bded197387
Size 114KB
Sample261014-ltfrysbt4j
SHA256 f43d563ac4b89e588cce56fdff2c151859160e380a78ea28d1c707fdff8db158
MD5 1f365ef58f155a3d5d3162bded197387
SHA1 491426d9c0cb8e86762f99c7a69499de188d75b4
SHA512 c9cfff438c25bbe7b8ac9456f5327fc968de85f6f6cf5b0c38f6b686b1c25fe0f805f0cbc2d0a5412fa72abde029d9870926d98e3add33fefb2a476bb7ab8a37
SSDEEP 3072:pymhYhCqgNzpqjRjy3CD+du58/ZbBQC5jVOz:p/hYhEsjRjySD+vpyCfk
TLSH
T141B3BF8D451A757ADBBFDA37889B3E374A2922B27D47905B933110C528371D2AB06F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-PSW.Win32.Kykymber.dpnr.1f365ef58f155a3d5d3162bded197387

jaffacakes118_Trojan-PSW.Win32.Kykymber.dpnr.1f365ef58f155a3d5d3162bded197387

.dll 114KB

SHA256 f43d563ac4b89e588cce56fdff2c151859160e380a78ea28d1c707fdff8db158
MD5 1f365ef58f155a3d5d3162bded197387
SHA1 491426d9c0cb8e86762f99c7a69499de188d75b4
SHA512 c9cfff438c25bbe7b8ac9456f5327fc968de85f6f6cf5b0c38f6b686b1c25fe0f805f0cbc2d0a5412fa72abde029d9870926d98e3add33fefb2a476bb7ab8a37
SSDEEP 3072:pymhYhCqgNzpqjRjy3CD+du58/ZbBQC5jVOz:p/hYhEsjRjySD+vpyCfk
TLSH
T141B3BF8D451A757ADBBFDA37889B3E374A2922B27D47905B933110C528371D2AB06F0F
MD5 SHA1 SHA512 SSDEEP TLSH

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths