KRONIXSOLUTIONS 14[.]3[.]exe | Triage

Sharing

General

Target

KRONIXSOLUTIONS 14.3.exe
Size

18.7MB
MD5

059db8cca6e81ade9387948f401c47d4
SHA1

8a6dac7d6ed9ec77016e2466224d487b26b7646a
SHA256

e0996d20778ae5b098f17a8e9cf5b8c84df41a436adc4317631fad5c79a239d9
SHA512

2db076ab3ff51d18ab99c1fdc1cacf8d6f8e889c29e996292b33bb15f67b86c133c7195a50747baebe28f0d9313681b9dd5e1bc2ceeaea8eade863003c06d318
SSDEEP

393216:XQ3OSNCRwvSx4vKskvYNR2hgQ3ieD+UQBcHBJvjYN1NwaAJh27/9tg:AejqSmizrAcH7j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KRONIXSOLUTIONS 14.3.exe

Files

KRONIXSOLUTIONS 14.3.exe
.exe windows:6 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 14.8MB - Virtual size: 14.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rtzvjbod
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

koxducaw
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ