J:\myproject\proyecto pruebas\Release\Cronos.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6945c020c4275424061a8185b491f9b0N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6945c020c4275424061a8185b491f9b0N.dll
Resource
win10v2004-20240709-en
General
-
Target
6945c020c4275424061a8185b491f9b0N.exe
-
Size
7.5MB
-
MD5
6945c020c4275424061a8185b491f9b0
-
SHA1
33213a19cae19434576444d7e63902a762b37949
-
SHA256
13e934058db514ce9fd593e44b327f660f551ea77d1b0bb984d9c81ad5240825
-
SHA512
76a42b1b565af461c7a9e9fb29f980926df753c4c9dda78648ba485324f16082d0ddcabf03a95988d474fc7e52a045dece3f551f94ef2f0523ff514364d44eb9
-
SSDEEP
196608:OqIewUUZ72qkV1SPhrpDeYS4z49hUvly:Oqv272quMFS4z49l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6945c020c4275424061a8185b491f9b0N.exe
Files
-
6945c020c4275424061a8185b491f9b0N.exe.dll windows:6 windows x86 arch:x86
d0ee3dcbc3dccb057c33934109b3d1c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetModuleHandleA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
WindowFromPoint
CharUpperBuffW
msvcp140
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
vcruntime140
strstr
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-string-l1-1-0
tolower
api-ms-win-crt-runtime-l1-1-0
_initterm_e
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-convert-l1-1-0
_itoa_s
Exports
Exports
Main
��1�n�l/9Х�bmb���ZuT]`,2�gM��U��D��p��?��t�m#��{у�G��E�J7f�4AW��t�o��. ��<��^�3�.�^C���m�yp��p� ��ڄU9 3^�������C ���G�E3NY4�~L07��H��%���� ƞ�.h���T#��4t�ihP"\e��J��m[���1"�i+��.�f�iz�I�;�E�;. `Jz� ��u0��l*��l}8#s�&��h����)� ���\�э]�L���?9KVn�k�n�u�͚W����;�,�]�ir�x�t|P���WZ�"��/Ghq��$t�Mk�\�ۻ"��<㋽�>|�L�����6�1�l��2|l�����{v�3v�����E2Us|��v� ��`�E����P>�o���e))�$�zD�̩Ԛ�_�⑩PJ�-�v�͒��8��X�d���}�7�����$*��p���Wh���E\�L��S��'�HQ>��8�TmZ�HYbrc����0Z�h6�@5�S��h��g��o��W�������Y���k�-���;<���$ɏ�et����B���1S�g=��v+R��g�Q������J�6��캞��]k"��k����qU��*ƚ �^p����V�{z���,'�a�8'��P�zg_�mW�z�̢��7d y�l4�7�i>�Xu�i�G�qA ��ۑ���T�.5Z�\^������G;�)�ȕ�Q��D���i�� �ma~[�*A��Vl�e���M�� ���,W3�a� _V�+�쐝�1�{�D���w�`�bh~:i�G���ES���ݣ�����6v@r@VM\7������c��/1���`������"��c�c�����F��ۥ��#�:Z�s;��.Xk��H&��B�T������Q��v��+SS� P ��EZ��9���CY�u��:������;���n��Z�Ӛ0I�����ѕH�F��:4��o��� Ou��6N�vC6O��p�D{ougC~��Xi���g�?���v4�������TƤ�����P��e'�G{�j2*��N��z���H? �S�X���ҩ��2��j�N���ߴ9��r*����{a��2�Ȋ(YFU�L|����]�ˠDuP[����h�X��h��q�qb�F���>��4M�R+�/�Ǚ��ˣ�V�.D�>��@��˭�)�p�c��HӱT����1��Za���r9E5N��t[��_`�S���sY0�T����R�>.��Cc*|�����1���xفQ�j�K��( +�Y�m�*3B���<�(���a��Ҟ�I�ƁTe��<�>� �\E� w��EPk�}L���O� .�~ gl�.���PJ����~R�Nbeţgw����Ó�V9�{��±r&�/O���|�� ����v��S<��?����/9�(�WBPcy�6y��C�&3P������k�����f��?y��a����:�d�}t���j���m����7��y������(� �F���W�62n�F�h����x�R���q�h��Sl��a���@�k!l�?���A�;T�t��M�M{&��Qo*�z@�� ��*`�ʇgk���Ec=Kh/l�d#�a�RpL�as��`���U-�擨&Ս ����)��K�A�Ho���K1�*Z��q��I#f��=�Z�.Ff���U[�?]�$�G-�f�*j4���*�e����)�{L�����X� �[�.��e�5S!�uWD��Av�c��צ�I�"2���0� Q��J�������;�r����2(]���y��&�����a2�A���7Z%�$���I�����p*h�A|�Zi:X���M�И������.��T&iR2�Z�_�z�B<#�5S/ *���4��l[� ���R��Ƀ6�~)��̓Ӟ�6�p,��`��/X`|����9p����EO���A���x��������C�X�4u�f�E��l�LmU5�� �k(V���E�����j��r�,)k��1�+h�vw�Y��xx��]����Tf�6a�b� �A�օǺ��`Ǒ�D�8��j�ak� ճX+��#�#��( Ubj�p쐁� ��O���p.\y��u?�U�I��?{Q0i, ����n�U��lU�}QU�V%2�.N�h������g��}|��� "X ���� F�r�zMP�'��/Q�J?%.���ͫѐ7����e��kT���x�������8�" �&�у�z��M�Ǻ�J��Ԁ!֝�Yi_),���\��G�Ր�6���jv�����X_����$:�£�Q�"�2�qm�>mq�^ L���E�x��o���6@��Ԙغ�p��l�$�����Yl:�̋f!>�1��X�����j���<1)�Υ����q����l�:C=�Wa�$��v���F�q��[��g��d�?lo�N�7��>b�"�-�+^���fF3w��Z�j��G�K�S����A�j�3Ȓ|f���xe���|Z��J����R�aǘO�è�y|媔;D���u�ӣ,�<cuXm轿x����b�X�?s��n����D �ĒH0g���w�J�J�i���%[�r����r����0��p|\��|�$��D�+��T�.��2�I��y��W5��K}u�U�'`,I�_@��3m�+��b��4�B�����n�i77���>��(]��o �����a��qM�4�Iג��rI��2�����D`gGm�@^Y�Zd�}�Cs��l6���e�T �%�ALKrَf������� �$��6:PH������9/ 5���a�����A��>D�Lj�hx��q�k����%����fy�.�-�dƗ�����e�W�.��� �^� Tv�c@A/�����K���/^)�hĀ^̍a�ee.�8��7��Gt��H4�����UJ�Vp�C����-� ��مDA�/���%���û��?�+]�����T|��D�Hc�fB �| |�T��D���E�I���@N�"�e:a����hm{۾]i#��D0 ��2$2^����������3��
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4)p Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.~hY Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.'F* Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ