KRONIXSOLUTIONS 15[.]7[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KRONIXSOLUTIONS 15.7.exe
Size

20.7MB
MD5

d52e66a2ff4c23bd6830a3acb4aee25d
SHA1

b92c590071a93a67065004a8fe3b67b2749a7a7d
SHA256

7d5b0f9e6119b3fff4a384621a66f3336170c803d1d6dcc3c709c46556c1f95d
SHA512

4b439157d6c8f6ee022548fb37af25e06b3ee6c70d6f2c486b797d473888cf527f7feab83781634e5e32e97d463a695ebcdce6e14f769be61bed18b0778b5ad8
SSDEEP

393216:Cn3OSNCRwvSx4vKskvYNR28evtxgQ3ieD+UQBcHBJvjYNp45I7qj:6ejqSmizn1bAcH7jv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KRONIXSOLUTIONS 15.7.exe

Files

KRONIXSOLUTIONS 15.7.exe
.exe windows:6 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 16.8MB - Virtual size: 16.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dghtfodo
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

urvfxjhu
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ