General

  • Target

    KRNLWRD (1).rar

  • Size

    5.5MB

  • MD5

    17d62d9c184a3a507bda6e9b2d2951ea

  • SHA1

    6c6aebde7f3a9df69096b1c346a101952aabf7aa

  • SHA256

    9799a70ff53f11048d8d70bc07a282df6ee8ac8c28dcf2c25f7e338a175ebf2e

  • SHA512

    ad91b2bfe17fe3b424cabc43541fcc113c59f9ee5a711f8b27050e231d6b6832beee5e8ee4190d274cbe9c33036f119c90a2b437dce7ce9fc3dd9f4cc1ec9c5f

  • SSDEEP

    98304:89AhRorS9Ry7Sm2WyV+86RyNIsAAjba6m6Qquw20f3BhC7u1r1Cr9aQxUj:8qhRorSK7v2WvRIpVm6lf3AuJ141M

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • KRNLWRD (1).rar
    .rar
  • KRNLWRD/Bunifu_UI_v1.5.3.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRNLWRD/ScintillaNET.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRNLWRD/injector.dll
    .dll windows x86

    895bb0ea23fa846711dd9de279e9ff9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KRNLWRD/krnl.dll
    .dll windows x86

    18cca9a178923a3cd29f2e2ee5a6389f


    Headers

    Imports

    Sections

  • KRNLWRD/krnl.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • KRNLWRD/krnlss.exe.config
    .xml