Resubmissions

11/07/2026, 04:31

260711-e5dneabw7k6

11/07/2026, 04:27

260711-e3egxsbw3j1

General

  • Target
    ntoskrnl.exe
  • Size 12.4MB
  • Sample260711-e5dneabw7k
  • SHA256 ee04f9e58743d6a6b5bc53c4bfa89ff97cd715b9091b0d67afd72e278bfc5395
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • ntoskrnl.exe
    .sys 12.4MB

ntoskrnl.exe

  • IMPHASH 58c088256f0d8fb6e85a5cf1b7c0d34d
  • SHA256 ee04f9e58743d6a6b5bc53c4bfa89ff97cd715b9091b0d67afd72e278bfc5395
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
df:c2:fc:f4:74:ee:a5:70:a7:ea:d8:b3:db:2e:43:07:94:08:cb:a3:38:96:c4:1e:3b:34:53:a3:65:b2:cd:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Minor OS version
0
Major OS version
10
Entry point
11846624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ntkrnlmp.pdb