General

  • Target
    KXToolbox_Setup_1.0.2_Win.exe
  • Size 172.4MB
  • Sample261014-1ehekaab83
  • SHA256 aae8c2f221919651dc4192693c12126887d1f2abbeeb8800e420be0723098512
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • KXToolbox_Setup_1.0.2_Win.exe
    .exe 172.4MB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/app-64.7z
    .7z 170.8MB
  • KX Toolbox Setup.exe
    .exe 193.3MB
  • LICENSE.electron.txt
    1KB
  • LICENSES.chromium.html
    14.5MB
  • chrome_100_percent.pak
    143KB
  • chrome_200_percent.pak
    212KB
  • d3dcompiler_47.dll
    .dll 4.7MB
  • ffmpeg.dll
    .dll 2.9MB
  • icudtl.dat
    10.0MB
  • libEGL.dll
    .dll 481KB
  • libGLESv2.dll
    .dll 7.6MB
  • locales/en-US.pak
    499KB
  • locales/pt-BR.pak
    593KB
  • resources.pak
    5.8MB
  • resources/app.asar
    1.4MB
  • resources/elevate.exe
    .exe 105KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/EULA.md
    4KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/LICENSE
    2KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/WorkflowIntegration.node
    .dll 388KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/bin/downloader_engine/GPL-3.0.txt
    34KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/bin/downloader_engine/MANIFEST.txt
    822B
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/bin/downloader_engine/ffmpeg.exe
    .exe 160.5MB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/bin/downloader_engine/ffprobe.exe
    .exe 160.3MB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/bin/downloader_engine/kxdl.exe
    .exe 17.0MB
  • __main__.pyc
    371B
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/css/howto.css
    15KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/css/picker.css
    3KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/css/styles.css
    75KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/download-engine.js
    .js 37KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/howto.html
    .html 2KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/howtoPreload.js
    .js 1KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/img/KXToolbox.ico
    56KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/img/logo.png
    .png 58KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/index.html
    .html 2KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/app.js
    .js 56KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/downloader.js
    .js 62KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/editwatcher-model.js
    .js 9KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/editwatcher.js
    .js 62KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/howto.js
    .js 29KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/importer.js
    .js 29KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/organizer.js
    .js 55KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/palettes.js
    .js 61KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/picker.js
    .js 12KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/strings.js
    .js 12KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/js/ui.js
    .js 38KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/main.js
    .js 216KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/manifest.xml
    .xml 358B
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/package.json
    1KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/picker.html
    .html 1KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/pickerPreload.js
    .js 1KB
  • resources/plugin-payload/com.kxeditor.resolve.toolbox/preload.js
    .js 5KB
  • snapshot_blob.bin
    328KB
  • v8_context_snapshot.bin
    695KB
  • vk_swiftshader.dll
    .dll 5.3MB
  • vk_swiftshader_icd.json
    106B
  • vulkan-1.dll
    .dll 886KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 424KB

KXToolbox_Setup_1.0.2_Win.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 aae8c2f221919651dc4192693c12126887d1f2abbeeb8800e420be0723098512
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths