BETA KRNL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BETA KRNL.exe
Size

38KB
MD5

7fb6e6a6467d55c5efaf01e420c9cb91
SHA1

23e154b476c66e0bb2bfb10a426e2c1cf770941d
SHA256

07540c765143e4aa706c533005d26ff2d1b80f4d835dad461bd98c42d4fb76c0
SHA512

06a717d4521c432b104e95dbc5272f6c50cc33d0beb6e9c5ae5be836963bfc4d4311cd48c6f443af8883cb0b899fa5683e34d98a36c4aa5347636b79e7dfbf3a
SSDEEP

384:BjGzBYI+SJTetYxlvv5MF970czQVwEvwRokwTOwq6uTxoN9uHwgCCCCCuKwAD5J3:BjGzBYh2t7Ra0cEGSJO5pVIh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BETA KRNL.exe

Files

BETA KRNL.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\radu6\source\repos\BETA KRNL\BETA KRNL\obj\Debug\BETA KRNL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ