Overview

overview

8

Static

static

7

HEU KMS Ac....0.exe

windows7-x64

8

HEU KMS Ac....0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEU-KMS-Activator-40.0.0.rar

  • Size

    4.5MB

  • MD5

    432c509e4c7b90cab727db44a13335af

  • SHA1

    dd2c523ac7e07824ef3728c44c20a0d3cf82afd2

  • SHA256

    76a8e33e7f66f2afd1af5c795f777476666d4402d7b7cc61c3edfbeeec0d4e0e

  • SHA512

    1c800ea0a0ebb4a5ebf90dc5e2e2cc1aedb195605e33e3d3dbc39eb57a14a7868a0807bf1821da6eb44b44db43cb26ac77705d77f3804d2afb8c9ebea63b2153

  • SSDEEP

    98304:6xztPCdoS/ddNip/d7+7u7/66q4s/lnIBeG8jWyuXCA3wNqGkR:6hGXdHiB5+S7/1qXIBSKJwEGS

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEU-KMS-Activator-40.0.0.rar
    .rar

    Password: 1progs

  • HEU KMS Activator 40.0.0/HEU_KMS_Activator_40.0.0.exe
    .exe windows:5 windows x86

    Password: 1progs


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections

  • HEU KMS Activator 40.0.0/Скачано с 1progs.com.url
    .url
  • HEU KMS Activator 40.0.0/更新地址：微信公众号.png
  • HEU KMS Activator 40.0.0/更新日志.txt