KRONIXSOLUTIONS_15[.]6[.]exe | Triage

Sharing

General

Target

KRONIXSOLUTIONS_15.6.exe
Size

20.7MB
MD5

622c022e52ee5c9069374942be3a261a
SHA1

10414f283b78cb6beabf5b5dad801d498d8cbbfa
SHA256

205858af0f733069fc8d8f41cec6f72a9fec5d377b9cd2e1772c0df271d963a2
SHA512

9dd5ee78b6f6328729feced1bb8e72696dbdc12b24ee1f5015fe67cc9d49967af8dcd01a501d3181651fd677b9aada891200e66cc3aeb55caf4626703f974e29
SSDEEP

393216:K63OSNCRwvSx4vKskvYNR28evtxgQ3ieD+UQBcHBJvjYNWX50I7ZLi:bejqSmizn1bAcH7jjD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KRONIXSOLUTIONS_15.6.exe

Files

KRONIXSOLUTIONS_15.6.exe
.exe windows:6 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 16.7MB - Virtual size: 16.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qcnhpdzk
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

krjfsxhv
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ