General

  • Target

    krnl.dll

  • Size

    5.3MB

  • MD5

    7e3cf68cc606c343fb545fe7a197913d

  • SHA1

    a4eb945c73cfccfac8238e26561db95ecb68383e

  • SHA256

    b77447c8a8b8207463d46c18641415a14ae3325ec55f2097e360d11a9842a8f4

  • SHA512

    982db3c47f12d84fe3a8455a3efedfde40fae58bb3cb1b07a2266b7e4a4cff913e90919e67259b98925999cb752f6b676a65c9eb982436b30232510c6bb2eddc

  • SSDEEP

    98304:OT6A6DGu3U2nl1StX5Lm/h/TZM1nqyniFcMMImPFI/7Ame72zA8V:mNlpLrqU7TIqFIcHqzA8V

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • krnl.dll
    .dll windows:6 windows x64 arch:x64

    4818f38f4c23095b5d13173f5a14f22e


    Headers

    Imports

    Exports

    Sections