Overview

overview

9

Static

static

5

KMSAuto x64.exe

windows10-2004-x64

9

KMSAuto x64.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    KMSAuto x64.exe
  • Size 5.0MB
  • Sample261022-tb268sdv5x
  • SHA256 b839e6f4a6d6facd4194c8ca856a9876d31c355c176daa2a7b3917c4b7aa9f4a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • KMSAuto x64.exe
    .exe 5.0MB
  • out.upx
    .exe 6.4MB

KMSAuto x64.exe

  • SHA256 b839e6f4a6d6facd4194c8ca856a9876d31c355c176daa2a7b3917c4b7aa9f4a
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:4windowsx64arch:x64

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
49:f6:fd:57:1b:fb:3b:17:79:de:07:78:75:fb:98:39:30:f7:73:6a:b8:67:74:d2:7b:ba:9a:a8:ea:77:1e:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
NO CERTIFICATE
Chains

Jan 1, 0001

PE Signature issue

Digest
fa:48:2c:e6:de:f9:31:e2:cf:27:84:2a:3c:90:3b:5e:7b:ec:c8:37
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
NO CERTIFICATE
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
4
Entry point
6763840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths