2528682ffe4831f7d3c024dbf6a6199d | Triage

Sharing

General

Target

2528682ffe4831f7d3c024dbf6a6199d
Size

917KB
MD5

2528682ffe4831f7d3c024dbf6a6199d
SHA1

f4653e5160b9dbf405f3a9943b6c4f514570f7c9
SHA256

5cde8773fb14dc100888a5c5181eb5a00f5513190e3b5560a66eeeaf78867b15
SHA512

caa9a6e9595ac89b80cc5c0cc40fa561018666850bd517e47494721add456a109b4847c1b61e3b2598cd301a832e1d6c31a8d55550226d5f693d1481ed103eeb
SSDEEP

12288:GVf1xaLKLwsRXYFveLajQlVmF1XpwTS2Dds5VwwIBelW1mx8/YuHSmdD8hc7nJrd:GVfysXQbQKFQGWdayDHSIAhWr+Yfqj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KMSAuto Helper XP v1.0.2/KMSAuto Helper.exe

Files

2528682ffe4831f7d3c024dbf6a6199d
.zip
KMSAuto Helper XP v1.0.2/KMSAuto Helper.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KMSAuto Helper XP v1.0.2/readme_helper_XP_ru.txt