Heist Editor3[.]5[.]9[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Heist Editor3.5.9.exe
Size

17.0MB
MD5

a1630404e08f6b02c2bac83158d05dec
SHA1

866fbb01d358c003bd3228125a6dcb99514be4a4
SHA256

c9285053400512057e4039428d31d61ae04db84f2d59695f38881a007f2181c0
SHA512

156fa3d246428c38d9f6ae0275bc0adfcc063937c58f670c990539cb1bbaea6847a91e5dbf9b801373046787b5764b5f3211ec8510a71ea54fd6489f51f837b5
SSDEEP

393216:PmHEye3iNXPYOLbyPv7HPVnYtLCN+bsrWHHJSdVjmAi:+k1S9YC0TPVCCMbsaJSxi

Score

1^/10

Malware Config

Signatures

Files

Heist Editor3.5.9.exe
.exe windows x64

caef544088a63d74ad2e3211dc3615bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

IsZoomed
CharUpperBuffW

gdi32

Escape

msimg32

TransparentBlt

winspool.drv

OpenPrinterW

advapi32

RegSetValueExW

shell32

SHGetMalloc

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW

uxtheme

GetThemeSysColor

ole32

OleLockRunning

oleaut32

SysStringLen

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI

oleacc

AccessibleObjectFromWindow

imm32

ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 627KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UGK
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dym
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..t{
Size: 12.8MB - Virtual size: 12.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

caef544088a63d74ad2e3211dc3615bc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: - Virtual size: 2.0MB

.rdata Size: - Virtual size: 627KB

.data Size: - Virtual size: 69KB

.pdata Size: - Virtual size: 99KB

_RDATA Size: - Virtual size: 348B

.UGK Size: - Virtual size: 9.8MB

.dym Size: 7KB - Virtual size: 6KB

..t{ Size: 12.8MB - Virtual size: 12.8MB

.rsrc Size: 4.1MB - Virtual size: 4.1MB

.text
Size: - Virtual size: 2.0MB

.rdata
Size: - Virtual size: 627KB

.data
Size: - Virtual size: 69KB

.pdata
Size: - Virtual size: 99KB

_RDATA
Size: - Virtual size: 348B

.UGK
Size: - Virtual size: 9.8MB

.dym
Size: 7KB - Virtual size: 6KB

..t{
Size: 12.8MB - Virtual size: 12.8MB

.rsrc
Size: 4.1MB - Virtual size: 4.1MB