KMSAuto_Lite[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KMSAuto_Lite.exe
Size

1.1MB
MD5

63fe40c7e56de7457cd505d9788f2e0b
SHA1

8b8c25fe58f404ceddde0159eb57a784a5555196
SHA256

16ae0b319ad2de142e3e924d938ed4acc680bb7f7db7c193f156934d722ff915
SHA512

379d36afc56427abdeee98ca398596e8ac794c35f460ca898d2a9b711e7cb153834817db1a22145f8d76afb24f77a4cf6d0c98ceaff37d784383fbd0468ce1ba
SSDEEP

24576:BDMlnE7oujugA/6Thkx5I4Yi8FCb5snzhUAo:BJ7ouy+NS1YCb5st

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KMSAuto_Lite.exe

Files

KMSAuto_Lite.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 805KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 32B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 239KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ