General

  • Target

    EasyKMS.exe

  • Size

    2.5MB

  • MD5

    d2a581c3c1539e09d864f20d968c0e13

  • SHA1

    7656a5440901626a2c2fb2e129bf0669f1c0fab9

  • SHA256

    52002261388b3b3f38d387d0d6b78ed63f3e25752db0b517669b345c372f94b5

  • SHA512

    b8d692fe03fa3cb818c6ae82151b5b6e7932f41473d62d57cddc74e13f0fb480ffd7f2dfd21565f93e6facb7221eb769031dc3a2c5d0fff1cff428ff0c593707

  • SSDEEP

    49152:7shdaIQpDWal/482dYH12ZLRuSlA3mmHPn10rCzP5yRhh7NjW:KQhllSdYH12ZLRuSlaP10rCLMRh9NjW

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • EasyKMS.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections