General

  • Target

    HEU_KMS_Activator_30.1.0.exe

  • Size

    4.5MB

  • MD5

    85f07564590a2d7c7b54cd8dca14ab8b

  • SHA1

    96aa415df8771e1819de851180aa918c3d7ce683

  • SHA256

    9b64e7b46204d935566985632bbc06c8ec3297c457f141f84ca095f51c7f7c88

  • SHA512

    f4d49de951bd29f5d308504f2fa4e9092c4110c2d82d95cdf1a375107161b66782f749f6384de445fd885a3ba9a935e6d12444bfcd22518617aa22ebaddb5c05

  • SSDEEP

    98304:Y+S9bgfQIIjGlf44QAy88/pZFcA+/JzF60oVMRuT7mGfVmH686eOq8v:rMcIIIjGlffQc8BrcF/JzF6JVLnmKVmm

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEU_KMS_Activator_30.1.0.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections