Static task
static1
Behavioral task
behavioral1
Sample
CronosLogTidy.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
CronosLogTidy.exe
Resource
win10v2004-20230220-en
General
-
Target
CronosLogTidy.exe
-
Size
318KB
-
MD5
cce4fc0df8283f3f3d383720f38771b3
-
SHA1
333fa4593a86fbf3316683e26d67c986d65f575a
-
SHA256
c8ef3f45b9b9e5c17110bc2829daa113a1435e2030e42b44e2642e6958513e8b
-
SHA512
c17724eed1342b2b2975d4c01d3114bae44483fa5aeb725369b26d5d864eb022b060cb0ebb67797872d69244599885230e4341a5a35507d8c469a29d237c56f3
-
SSDEEP
6144:C/H92GeQA4W//5u85cb/VNsRB0g3avKEuANHNUAJVHtES4A5049awJ5cO2Fg:C/NAt//5t5uXu35vOtUATHtD4Ai4HaO/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CronosLogTidy.exe
Files
-
CronosLogTidy.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ