KRNL-NEW_r01E8BKK[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KRNL-NEW_r01E8BKK.exe
Size

4.0MB
MD5

f48e9af8de33b91ea10a1ac2b6d570b8
SHA1

0a4d32e478bf22bcc85149653d5216bb7adf708e
SHA256

f137ab5ef2514e2cf37d516b652549438519aa13fffec3be847b51dbe530e819
SHA512

823b57fc8ae06dd700aa0092d3c99684c861ee5591d5d02d11495600e82f1538179db9de30ff77800c0d2aa609168a5ca473e7335b63d15bbc6e12949b6b713e
SSDEEP

98304:0irImFu+8L14zD2S/juLYx3BRFdECHy9Cvr5Ao5C:VDA+8+CifoIECVN5C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KRNL-NEW_r01E8BKK.exe

Files

KRNL-NEW_r01E8BKK.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ