General

  • Target

    9874c0fee551e8bfba464283695d9d7edccd46cb84ec8c5e6e56d97e74f4ebb7

  • Size

    4.3MB

  • MD5

    2212a87a2ddcabbe2821c547193d74b0

  • SHA1

    fcf5990ab4b8955715b07852a2849e6a579369e9

  • SHA256

    9874c0fee551e8bfba464283695d9d7edccd46cb84ec8c5e6e56d97e74f4ebb7

  • SHA512

    d0070ebe39fc6c87878c3a8e421bbeb947e6164143b0f7308aad9f1331ddadb1747493c3abef918ff095411e711bfd841e67e0788948ac8920072436afc768e6

  • SSDEEP

    98304:5YmotqNvGBRe1q9PhtGBsGzLNYmgQtaF+dbOGvt0x46ke6eq+:5O+vGBRe4Ze7LCOt7hOgt026RBq+

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9874c0fee551e8bfba464283695d9d7edccd46cb84ec8c5e6e56d97e74f4ebb7
    .zip
  • HEU_KMS_Activator_v41.1.0/HEU_KMS_Activator_41.1.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections