krnl_beta[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

krnl_beta.exe
Size

1.8MB
MD5

c86a30b73ad992acf4912c42cd2fb396
SHA1

8cb5733b8fe8627d3cd7408db544613e413ba621
SHA256

5003f5b88169731d27ac22a8cf5050a95edace2382ada0ca739bc68972ce70c5
SHA512

de8f181ad187fbe82ee57357e7cd8d94f962b04815e234b8caa0b32d49d3afa3ca3f59b26c1afaa70f661f5f237145a31867774192b856290803fcd728f4f4c6
SSDEEP

49152:XP1uB0SVp4+KSxyrRUzS65+x+rnxYr9P:XPk0ST4+RgRUzS65+x1ZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
krnl_beta.exe

Files

krnl_beta.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ