General

  • Target

    KRNL-bootstrapper.exe

  • Size

    13.2MB

  • MD5

    5c14e347317a51194b82ef0855e26e3b

  • SHA1

    77fb645077b717acfb78dee36371a04976b26e2c

  • SHA256

    e0aca3445c99c4be321fcf167f7edfe4b307c8cded7bfeda7f61673dee79c955

  • SHA512

    1a054189f35f7aba31c080e27ebdbbc7bb4fc5110124b1317631a422d9888d51e60cdcd507c1073280b2bb7dfec1de957ec736b112413a70ca48be1baff8b6a1

  • SSDEEP

    393216:owAct+L01+l+uq+Vvj1+TtIiF90VQxzC7P6ga:owQ01+l+uqgvj1QtINSC7PK

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • KRNL-bootstrapper.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • Stub.pyc