Static task
static1
Behavioral task
behavioral1
Sample
KRONIXSOLUTIONS 13.1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
KRONIXSOLUTIONS 13.1.exe
Resource
win10v2004-20240221-en
General
-
Target
KRONIXSOLUTIONS 13.1.exe
-
Size
18.1MB
-
MD5
9b354b7daf7e74799711371e66d59bc0
-
SHA1
55333bdd10524f926c9d254f94335547052fb0fe
-
SHA256
f204937262963f7c03315accfc7219292957f23e987270250828792dcbef6077
-
SHA512
83657233346f913dbcccb94cb804e708b5b3f959987334fb5484d4718fee01e08e1084bc95be8783c1ee66b5b91f5cbd77cd56a426920795f4196c966f374b9b
-
SSDEEP
393216:y83OSNCRwvSx4vKskvYNR2hgQ3ieD+UQBcHBJvjYNl0EQuKTCiuOW:ZejqSmizrAcH7jCK8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KRONIXSOLUTIONS 13.1.exe
Files
-
KRONIXSOLUTIONS 13.1.exe.exe windows:6 windows x64 arch:x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 14.9MB - Virtual size: 14.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fffnjooj Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xqrvnevh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ