Static task
static1
Behavioral task
behavioral1
Sample
Heart-Sender-V1.2/Heart-Sender-V1.2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Heart-Sender-V1.2/Heart-Sender-V1.2.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Heart-Sender-V1.2/HtmlAgilityPack.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Heart-Sender-V1.2/HtmlAgilityPack.dll
Resource
win10v2004-20231215-en
General
-
Target
7c33debc12b5c1433444900912fe9936
-
Size
162KB
-
MD5
7c33debc12b5c1433444900912fe9936
-
SHA1
c143ac4145f5b27eb25deb1f71f9f8df7b69e5ec
-
SHA256
ebeb3cd5a96e2c4e5876e8736f6e3896eed641e113257e75d412a35496815d35
-
SHA512
f93046418e0045d14c34e8abc884ddb9f936dd391626ad88000abd17c2d64e85aba8be98fc081418abdd70847163477295956ae0e4ee070017341eea2793b95b
-
SSDEEP
3072:YxyeiphGrc/QRHu5uuCEYvZL1g9C9PshQ/DRnUo:uyeKkc/QI7ao0rDRH
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Heart-Sender-V1.2/Heart-Sender-V1.2.exe unpack001/Heart-Sender-V1.2/HtmlAgilityPack.dll
Files
-
7c33debc12b5c1433444900912fe9936.zip
-
Heart-Sender-V1.2/Heart-Sender-V1.2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Heart-Sender-V1.2/HtmlAgilityPack.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Heart-Sender-V1.2/Settings.ini
-
Heart-Sender-V1.2/license.txt
-
Heart-Sender-V1.2/logs/06-06-2019/failed.txt
-
Heart-Sender-V1.2/logs/06-06-2019/logs.txt
-
Heart-Sender-V1.2/logs/06-06-2019/success.txt
-
Heart-Sender-V1.2/logs/17-03-2019/failed.txt
-
Heart-Sender-V1.2/logs/17-03-2019/logs.txt
-
Heart-Sender-V1.2/logs/17-03-2019/success.txt
-
Heart-Sender-V1.2/logs/18-03-2019/failed.txt
-
Heart-Sender-V1.2/logs/18-03-2019/logs.txt
-
Heart-Sender-V1.2/logs/18-03-2019/success.txt
-
add icq.txt