Static task
static1
Behavioral task
behavioral1
Sample
Heist Editor3.5.8.exe.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Heist Editor3.5.8.exe.zip
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Heist Editor3.5.8.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Heist Editor3.5.8.exe
Resource
win10v2004-20220812-en
General
-
Target
Heist Editor3.5.8.exe.zip
-
Size
12.3MB
-
MD5
ff9edb1b975c5cbea50d6c793cc898b2
-
SHA1
8fbd4f0e75cbd3556f20ccbbc2313b5cffcb040a
-
SHA256
1e76ad476448ac5ed422b72cc7719a69758f99e13fb1ead4ba09eb9a02f340ba
-
SHA512
e24a2a3af65267fe9c445e79113de2193e29e158b35dfcc3c4c329e86a293e1a5bd035ba4e9e6fddb0b35aebc19f39dda919ded4cdff00694e5d2eda55cf3070
-
SSDEEP
393216:SvZ75radUPRwgBbqIlj8dvlt7sc0mkHmN:SfuaBJqrn7z5N
Malware Config
Signatures
Files
-
Heist Editor3.5.8.exe.zip.zip
-
Heist Editor3.5.8.exe.exe windows x64
caef544088a63d74ad2e3211dc3615bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsZoomed
CharUpperBuffW
gdi32
Escape
msimg32
TransparentBlt
winspool.drv
OpenPrinterW
advapi32
RegSetValueExW
shell32
SHGetMalloc
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
uxtheme
GetThemeSysColor
ole32
OleLockRunning
oleaut32
SysStringLen
oledlg
OleUIBusyW
gdiplus
GdipDrawImageRectI
oleacc
AccessibleObjectFromWindow
imm32
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 627KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.5#q Size: - Virtual size: 8.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.9EF Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aM Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
__MACOSX/._Heist Editor3.5.8.exe