Static task
static1
Behavioral task
behavioral1
Sample
KMS激活工具(AAct)4.3.0.x64汉化版.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
KMS激活工具(AAct)4.3.0.x64汉化版.exe
Resource
win10v2004-20231222-en
General
-
Target
KMS激活工具(AAct)4.3.0.x64汉化版.exe
-
Size
3.0MB
-
MD5
9087ab33eff0c14b7f0a4be70ad23dea
-
SHA1
243ddb8d80c1b4d3134680cb5774be7bb7608b50
-
SHA256
c12972611c6acc2259b062b2bed8d11649fedc060d14a8f3e53d6e2f1dc63733
-
SHA512
06e5453a01a95f5bc2d5f68e39096d6b735f74c2686526e7df6eef23904594167e718e654072b7191a5324352bcd9a525d5a750e67e677d255f0ebdb1a9305f1
-
SSDEEP
49152:q7EaM3gKD4uk4nrfsAfHyP7Es7oxk/GruBcCUccghdcce+71f:3yJ/GKBcjghPT7Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KMS激活工具(AAct)4.3.0.x64汉化版.exe
Files
-
KMS激活工具(AAct)4.3.0.x64汉化版.exe.exe windows:5 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 717KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.drectve Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ