General

  • Target

    HEU_KMS_Activator_Dragon.exe

  • Size

    4.6MB

  • MD5

    3b4c7bafb37601aebcd4a52ffba70117

  • SHA1

    0f881e7ad5a304b39e07583c6b336f6198042492

  • SHA256

    fe55299e52433162845af063524bd63f77a446541ea64e1fcbc75e3caa227f7e

  • SHA512

    e88ad0e20160832b48546ac84a17051eea9eee62cf0ac3b363cfcecc0a41c19cadc59aeba1da5b730b301412f9134fe410d03b56f46ec320b720a974933e43f8

  • SSDEEP

    98304:m+S9bgjfknhQQiOcDYRu23oVMRuT7mGfVmH68+eOq8:dMc4nPiOcqRYVLnmKVma8jP8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • HEU_KMS_Activator_Dragon.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections