General

  • Target

    6d863f3866c3a80f77e50e31bbe6f364db29f466fcfd66b252816eedc4aec510

  • Size

    4.3MB

  • MD5

    3b9c713dea31e83379b490daca325348

  • SHA1

    3b70cd02337bf6f09e9ebf5df235ad99b55d98b6

  • SHA256

    6d863f3866c3a80f77e50e31bbe6f364db29f466fcfd66b252816eedc4aec510

  • SHA512

    868b237bc296415a155a5f3fefd96bdf5e009ee23076e6a087b4174a226e95e77536bce51d2a3263bf932fac788d3098748f2197655920d0b057c50b145a15aa

  • SSDEEP

    98304:qU9vuG1g0EZ9Jwy7JiZgkZIxUl41sxpqG9li5CKUeg4AE:iG1gbiZgc1lLbqeliQKBhAE

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d863f3866c3a80f77e50e31bbe6f364db29f466fcfd66b252816eedc4aec510
    .zip
  • HEU_KMS_Activator_v40.0.0/HEU_KMS_Activator_40.0.0.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections

  • HEU_KMS_Activator_v40.0.0/更新日志.txt