General

  • Target

    KRNLWRD.rar

  • Size

    5.5MB

  • MD5

    79c6e7a622b2c1379a8144c9d1ddeee2

  • SHA1

    f60e0fd39d41e2d4b0ed9fda16fc8f54e64d2b71

  • SHA256

    2c21ca7f232beffd48a26b0efb80cbbe93345184f29eee2cf175c73d6822c204

  • SHA512

    0c5c612929d1668ee7c40e210b0f8520c69f8917f1de8bf19fa932900c56a22ce1336f8dc5b7d410633f26f4157130a2583b3b94f0bc849a49b84decd3ae56a6

  • SSDEEP

    98304:q1cOn9jxVE/jeMQychzOeGVffeVrkHUucEW18NdBhC7u1r1Cr9aQxUw:qOOdE3qhzXGVHeVr/mAuJ141H

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • KRNLWRD.rar
    .rar
  • KRNLWRD/Bunifu_UI_v1.5.3.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRNLWRD/ScintillaNET.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • KRNLWRD/injector.dll
    .dll windows x86

    895bb0ea23fa846711dd9de279e9ff9e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • KRNLWRD/krnl.dll
    .dll windows x86

    18cca9a178923a3cd29f2e2ee5a6389f


    Headers

    Imports

    Sections

  • KRNLWRD/krnl.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • KRNLWRD/krnlss.exe.config
    .xml