General

  • Target

    fe82bbe5f1c8a9c8bc803f3a4214b4fcf0abf4308cb63836111b63b5b7bc8f9c

  • Size

    4.3MB

  • MD5

    b6526fa894a7dac0e8ea6406d8fa3925

  • SHA1

    aed2fef9bfb2eb08b2b01ae7ee2cc174b2156a1f

  • SHA256

    fe82bbe5f1c8a9c8bc803f3a4214b4fcf0abf4308cb63836111b63b5b7bc8f9c

  • SHA512

    3d4980fb8058b76922c692a50e843acc35d0b9c8aa437e58fa0dccf0a3424eaceaaa26f1a0d169bb3bc37218d3986c1d4b05b3fdf5fd63ab8d5b37e993d1d0e4

  • SSDEEP

    98304:PeG/aCgRD70s7dcxawvUZwVOZ+Dr8G9R2hOCgea8gL:mG/ajcxaMhV/38eR2UCdDgL

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fe82bbe5f1c8a9c8bc803f3a4214b4fcf0abf4308cb63836111b63b5b7bc8f9c
    .zip
  • HEU_KMS_Activator_40.0.0.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections

  • 更新日志.txt
  • 爱纯净官网.url
    .url
  • 爱纯净微信公众号.jpg
    .jpg