General

  • Target

    kmax Setup 1.0.0.exe

  • Size

    90.6MB

  • MD5

    f65ec6d28990c6219bcdc223af914505

  • SHA1

    688cf51c68a97da1fe7e169b3a99e9406c17e9d4

  • SHA256

    f7f2335afde689822c6e070e4920871d204f86a1977dadcb5fb89aae8a18f9c9

  • SHA512

    ff3a653075c1ede51372413d4abae42a7b4ec31e0f756e4f5c6a3f1f79523385b5dbbdc253fa890db401ef2ac891e9434a4885528a7d6db87dcf858e6f2a4764

  • SSDEEP

    1572864:U++BWqL9BHOKcHAPaG9wL7uwbzMwESLBsGPC7V6OcUcZyxmVBH43iWsfyAK5Roq0:UPB1+KG69wLSwbBES1s4C7H6MxmVBY3Y

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • kmax Setup 1.0.0.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/SpiderBanner.dll
    .dll windows:5 windows x86 arch:x86

    90179d905cdca282880541c826651c15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • kmax.exe
    .exe windows:5 windows x64 arch:x64

    5d8d583fba535d084df082f4bcef2d21


    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    5585f5d849dffc51c08f9c2876f039ac


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app.asar
  • resources/app.asar.unpacked/node_modules/ilovingcats/dist/index.js
    .js
  • resources/app.asar.unpacked/node_modules/ilovingcats/package.json
  • resources/app.asar.unpacked/node_modules/ilovingcats/prebuilds/win32-x64/node.napi.node
    .dll windows:6 windows x64 arch:x64

    a280917cbd680c3caf2f5569e63a4b48


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/ilovingcats/src/dpapi_addon.h
  • resources/app.asar.unpacked/node_modules/ilovingcats/src/dpapi_not_supported.cpp
  • resources/app.asar.unpacked/node_modules/ilovingcats/src/dpapi_win.cpp
  • resources/app.asar.unpacked/node_modules/ilovingcats/src/main.cpp
  • resources/app.asar.unpacked/node_modules/sqlite3/LICENSE
  • resources/app.asar.unpacked/node_modules/sqlite3/build/Release/node_sqlite3.node
    .dll windows:6 windows x64 arch:x64

    04084d643c609dec5b942b355cf5584d


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/sqlite3/deps/common-sqlite.gypi
  • resources/app.asar.unpacked/node_modules/sqlite3/deps/extract.js
  • resources/app.asar.unpacked/node_modules/sqlite3/deps/sqlite-autoconf-3440200.tar.gz
    .gz
  • sqlite-autoconf-3440200.tar
    .tar
  • sqlite-autoconf-3440200/INSTALL
  • sqlite-autoconf-3440200/Makefile.am
  • sqlite-autoconf-3440200/Makefile.fallback
    .sh linux
  • sqlite-autoconf-3440200/Makefile.in
  • sqlite-autoconf-3440200/Makefile.msc
  • sqlite-autoconf-3440200/README.txt
  • sqlite-autoconf-3440200/Replace.cs
    .js
  • sqlite-autoconf-3440200/aclocal.m4
    .ps1
  • sqlite-autoconf-3440200/compile
  • sqlite-autoconf-3440200/config.guess
  • sqlite-autoconf-3440200/config.sub
  • sqlite-autoconf-3440200/configure
    .vbs
  • sqlite-autoconf-3440200/configure.ac
  • sqlite-autoconf-3440200/depcomp
  • sqlite-autoconf-3440200/install-sh
    .sh .vbs linux polyglot
  • sqlite-autoconf-3440200/ltmain.sh
  • sqlite-autoconf-3440200/missing
  • sqlite-autoconf-3440200/shell.c
  • sqlite-autoconf-3440200/sqlite3.1
  • sqlite-autoconf-3440200/sqlite3.c
  • sqlite-autoconf-3440200/sqlite3.h
  • sqlite-autoconf-3440200/sqlite3.pc.in
  • sqlite-autoconf-3440200/sqlite3.rc
  • sqlite-autoconf-3440200/sqlite3ext.h
  • sqlite-autoconf-3440200/sqlite3rc.h
  • sqlite-autoconf-3440200/tea/Makefile.in
  • sqlite-autoconf-3440200/tea/README
  • sqlite-autoconf-3440200/tea/aclocal.m4
  • sqlite-autoconf-3440200/tea/configure
    .vbs
  • sqlite-autoconf-3440200/tea/configure.ac
    .sh linux
  • sqlite-autoconf-3440200/tea/doc/sqlite3.n
  • sqlite-autoconf-3440200/tea/generic/tclsqlite3.c
  • sqlite-autoconf-3440200/tea/license.terms
  • sqlite-autoconf-3440200/tea/pkgIndex.tcl.in
  • sqlite-autoconf-3440200/tea/tclconfig/install-sh
    .sh .vbs linux polyglot
  • sqlite-autoconf-3440200/tea/tclconfig/tcl.m4
  • sqlite-autoconf-3440200/tea/win/makefile.vc
    .vbs
  • sqlite-autoconf-3440200/tea/win/nmakehlp.c
  • sqlite-autoconf-3440200/tea/win/rules.vc
  • resources/app.asar.unpacked/node_modules/sqlite3/deps/sqlite3.gyp
  • resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3-binding.js
  • resources/app.asar.unpacked/node_modules/sqlite3/lib/sqlite3.js
    .js
  • resources/app.asar.unpacked/node_modules/sqlite3/lib/trace.js
    .js
  • resources/app.asar.unpacked/node_modules/sqlite3/package.json
  • resources/app.asar.unpacked/node_modules/sqlite3/src/async.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/backup.h
    .js
  • resources/app.asar.unpacked/node_modules/sqlite3/src/database.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/gcc-preinclude.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/macros.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/statement.h
  • resources/app.asar.unpacked/node_modules/sqlite3/src/threading.h
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • resources/node_modules/axios/CHANGELOG.md
  • resources/node_modules/axios/LICENSE
  • resources/node_modules/axios/MIGRATION_GUIDE.md
  • resources/node_modules/axios/README.md
    .js
  • resources/node_modules/axios/dist/axios.js
    .js
  • resources/node_modules/axios/dist/axios.js.map
    .js
  • resources/node_modules/axios/dist/axios.min.js
    .js
  • resources/node_modules/axios/dist/axios.min.js.map
    .js
  • resources/node_modules/axios/dist/browser/axios.cjs
    .js
  • resources/node_modules/axios/dist/browser/axios.cjs.map
    .js
  • resources/node_modules/axios/dist/esm/axios.js
    .js
  • resources/node_modules/axios/dist/esm/axios.js.map
    .js
  • resources/node_modules/axios/dist/esm/axios.min.js
    .js
  • resources/node_modules/axios/dist/esm/axios.min.js.map
    .js
  • resources/node_modules/axios/dist/node/axios.cjs
    .js
  • resources/node_modules/axios/dist/node/axios.cjs.map
    .js
  • resources/node_modules/axios/index.d.cts
  • resources/node_modules/axios/index.d.ts
  • resources/node_modules/axios/index.js
  • resources/node_modules/axios/lib/adapters/README.md
    .js
  • resources/node_modules/axios/lib/adapters/adapters.js
    .js
  • resources/node_modules/axios/lib/adapters/fetch.js
    .js
  • resources/node_modules/axios/lib/adapters/http.js
    .js
  • resources/node_modules/axios/lib/adapters/xhr.js
    .js
  • resources/node_modules/axios/lib/axios.js
  • resources/node_modules/axios/lib/cancel/CancelToken.js
    .js
  • resources/node_modules/axios/lib/cancel/CanceledError.js
  • resources/node_modules/axios/lib/cancel/isCancel.js
  • resources/node_modules/axios/lib/core/Axios.js
    .js
  • resources/node_modules/axios/lib/core/AxiosError.js
  • resources/node_modules/axios/lib/core/AxiosHeaders.js
    .js
  • resources/node_modules/axios/lib/core/InterceptorManager.js
  • resources/node_modules/axios/lib/core/README.md
  • resources/node_modules/axios/lib/core/buildFullPath.js
    .js
  • resources/node_modules/axios/lib/core/dispatchRequest.js
  • resources/node_modules/axios/lib/core/mergeConfig.js
  • resources/node_modules/axios/lib/core/settle.js
  • resources/node_modules/axios/lib/core/transformData.js
    .js
  • resources/node_modules/axios/lib/defaults/index.js
    .js
  • resources/node_modules/axios/lib/defaults/transitional.js
  • resources/node_modules/axios/lib/env/README.md
  • resources/node_modules/axios/lib/env/classes/FormData.js
  • resources/node_modules/axios/lib/env/data.js
  • resources/node_modules/axios/lib/helpers/AxiosTransformStream.js
    .js
  • resources/node_modules/axios/lib/helpers/AxiosURLSearchParams.js
  • resources/node_modules/axios/lib/helpers/HttpStatusCode.js
  • resources/node_modules/axios/lib/helpers/README.md
  • resources/node_modules/axios/lib/helpers/ZlibHeaderTransformStream.js
  • resources/node_modules/axios/lib/helpers/bind.js
  • resources/node_modules/axios/lib/helpers/buildURL.js
    .js
  • resources/node_modules/axios/lib/helpers/callbackify.js
    .js
  • resources/node_modules/axios/lib/helpers/combineURLs.js
  • resources/node_modules/axios/lib/helpers/composeSignals.js
    .js
  • resources/node_modules/axios/lib/helpers/cookies.js
    .js
  • resources/node_modules/axios/lib/helpers/deprecatedMethod.js
    .js
  • resources/node_modules/axios/lib/helpers/formDataToJSON.js
    .js
  • resources/node_modules/axios/lib/helpers/formDataToStream.js
    .js
  • resources/node_modules/axios/lib/helpers/fromDataURI.js
  • resources/node_modules/axios/lib/helpers/isAbsoluteURL.js
  • resources/node_modules/axios/lib/helpers/isAxiosError.js
  • resources/node_modules/axios/lib/helpers/isURLSameOrigin.js
  • resources/node_modules/axios/lib/helpers/null.js
  • resources/node_modules/axios/lib/helpers/parseHeaders.js
    .js
  • resources/node_modules/axios/lib/helpers/parseProtocol.js
  • resources/node_modules/axios/lib/helpers/progressEventReducer.js
    .js
  • resources/node_modules/axios/lib/helpers/readBlob.js
  • resources/node_modules/axios/lib/helpers/resolveConfig.js
    .js
  • resources/node_modules/axios/lib/helpers/speedometer.js
    .js
  • resources/node_modules/axios/lib/helpers/spread.js
    .js
  • resources/node_modules/axios/lib/helpers/throttle.js
    .js
  • resources/node_modules/axios/lib/helpers/toFormData.js
    .js
  • resources/node_modules/axios/lib/helpers/toURLEncodedForm.js
  • resources/node_modules/axios/lib/helpers/trackStream.js
    .js
  • resources/node_modules/axios/lib/helpers/validator.js
    .js
  • resources/node_modules/axios/lib/platform/browser/classes/Blob.js
  • resources/node_modules/axios/lib/platform/browser/classes/FormData.js
  • resources/node_modules/axios/lib/platform/browser/classes/URLSearchParams.js
  • resources/node_modules/axios/lib/platform/browser/index.js
  • resources/node_modules/axios/lib/platform/common/utils.js
  • resources/node_modules/axios/lib/platform/index.js
  • resources/node_modules/axios/lib/platform/node/classes/FormData.js
  • resources/node_modules/axios/lib/platform/node/classes/URLSearchParams.js
  • resources/node_modules/axios/lib/platform/node/index.js
    .js
  • resources/node_modules/axios/lib/utils.js
    .js
  • resources/node_modules/axios/package.json
  • resources/node_modules/follow-redirects/LICENSE
  • resources/node_modules/follow-redirects/README.md
  • resources/node_modules/follow-redirects/debug.js
    .js
  • resources/node_modules/follow-redirects/http.js
  • resources/node_modules/follow-redirects/https.js
  • resources/node_modules/follow-redirects/index.js
    .js
  • resources/node_modules/follow-redirects/package.json
  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall kmax.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.