KRONIXSOLUTIONS_13[.]3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KRONIXSOLUTIONS_13.3.exe
Size

18.2MB
MD5

0e6c8eda4ffdc4ba0f40bbf8c67fdaac
SHA1

a4434260016c436d9bc0ac4e005fbde98b73623c
SHA256

b20d8cb913bb689d1fab15dfd01f6fef6a30364d092c9fba6b5b88d9551d5c43
SHA512

61487368b74efbd3650005e89d6459d8e940c42257f4dffa62a97fca8b99ea10c2c036aa1a5d154136f4043f95b9b92c4499be7e02d21e51183023dde82bc9c9
SSDEEP

393216:St3OSNCRwvSx4vKskvYNR2hgQ3ieD+UQBcHBJvjYNhQ35tSlIRtzInGI:4ejqSmizrAcH7jml+zm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KRONIXSOLUTIONS_13.3.exe

Files

KRONIXSOLUTIONS_13.3.exe
.exe windows:6 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oiilupmv
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zxhxgdhi
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ