Static task
static1
General
-
Target
Heist Editor (1).rar
-
Size
25.0MB
-
MD5
07438d6d27ce6ce45010ddbdce2c91df
-
SHA1
ee8dac691349e010851d4d4b5b666c4951da47e1
-
SHA256
78a5864f5cfa0ea7d6852dadc750b85204a27ad7e57438914f2e5fadb817d447
-
SHA512
72def59fec3b4bcce9f048f1abf04b74958c95bd92b20bf65f2456d93d862fab005185a2562e8c171d1921bb2447efa58c00f8b0bd69b88ec184c42c6d613f03
-
SSDEEP
786432:vmXCiDPA5fSWT9dArFgKRz48pZ+wrswB/:uXCibsf7wFg6NZ+ww6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Heist Editor.exe
Files
-
Heist Editor (1).rar.rar
-
Heist Editor.exe.exe windows x64
f439712d95964b68fcda9634ba965a39
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsZoomed
CharUpperBuffW
gdi32
Escape
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RegSetValueExW
shell32
SHGetMalloc
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
uxtheme
GetThemePartSize
ole32
CoInitializeEx
oleaut32
LoadTypeLi
oledlg
OleUIBusyW
gdiplus
GdipCreateFromHDC
oleacc
LresultFromObject
imm32
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 630KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.5Cg Size: - Virtual size: 18.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.7%F Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.<] Size: 26.8MB - Virtual size: 26.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ