General

  • Target

    HEU_KMS_Activator_30.2.0.exe

  • Size

    4.5MB

  • MD5

    f18506afeb56fcde4a4f0ae9ed3b1134

  • SHA1

    b909944ebfd258a9401802edc743ad759801949f

  • SHA256

    84ff818a54f8d74ac9f108f4eb59548c30e1187a55f9c979235e12b11310c174

  • SHA512

    927ff6411548e7b468071a3d8acf6c1008ff3a43233015732459185ade7e74f666b61a4c3ad690350b65ab3ca06e3e0bd2f68854d7caa36118cbdfedf6bafac9

  • SSDEEP

    98304:j+S9bgsTaFGQ0+mra19Dr7AoVMRuT7mGfVmH68TeOq8:CMc6YGQ021tr71VLnmKVma8KP8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEU_KMS_Activator_30.2.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections