General

  • Target

    Heroic-2.14.1-Setup-x64.exe

  • Size

    119.4MB

  • MD5

    62efaf1b786bc7231754f9fbb4f4ebf3

  • SHA1

    3dc8729b5552aee0d6dddddf310a74ff96d2d8be

  • SHA256

    1d05cba737012c8122d3d3cd8dab4d99c58e8d928cfdba845844abd15160e749

  • SHA512

    eb5f06680e08e744c67e87d850cb04615ee7d25e082a7205b34abf4f1bf472391607571e08129878520853c4c1b5fbea3a9ff79b1e4419d474dcf0f711b96b6a

  • SSDEEP

    3145728:JfBpNJlr5quJ6VlAbtYurLfU8Rpe/WFboO4ZlZvQ0:3LJlVqE5LyOFG1Q0

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 3 IoCs
  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

Files

  • Heroic-2.14.1-Setup-x64.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/SpiderBanner.dll
    .dll windows:5 windows x86 arch:x86

    90179d905cdca282880541c826651c15


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • Heroic.exe
    .exe windows:5 windows x64 arch:x64

    2a793246865132e6a553388d6c6b7bcf


    Headers

    Imports

    Exports

    Sections

  • Heroic.exe.sig
  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    91b8685f04cd4eceae98e68aec559609


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app-update.yml
  • resources/app.asar
  • resources/app.asar.unpacked/build/bin/win32/gogdl.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • cli.pyc
  • resources/app.asar.unpacked/build/bin/win32/legendary.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • cli.pyc
  • resources/app.asar.unpacked/build/bin/win32/nile.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • cli.pyc
  • resources/app.asar.unpacked/build/icon-dark.png
    .png
  • resources/app.asar.unpacked/build/icon-light.png
    .png
  • resources/app.asar.unpacked/build/icon.icns
  • resources/app.asar.unpacked/build/icon.png
    .png
  • resources/app.asar.unpacked/build/webviewPreload.js
  • resources/app.asar.unpacked/build/win_icon.ico
  • resources/app.asar.unpacked/node_modules/font-list/LICENSE
  • resources/app.asar.unpacked/node_modules/font-list/demo.js
  • resources/app.asar.unpacked/node_modules/font-list/index.js
    .js
  • resources/app.asar.unpacked/node_modules/font-list/libs/darwin/fontlist
    .macho macos arch:x64
  • resources/app.asar.unpacked/node_modules/font-list/libs/darwin/fontlist.m
  • resources/app.asar.unpacked/node_modules/font-list/libs/darwin/index.js
    .js
  • resources/app.asar.unpacked/node_modules/font-list/libs/linux/index.js
  • resources/app.asar.unpacked/node_modules/font-list/libs/win32/fonts.vbs
    .vbs
  • resources/app.asar.unpacked/node_modules/font-list/libs/win32/getByPowerShell.js
    .js .ps1
  • resources/app.asar.unpacked/node_modules/font-list/libs/win32/getByVBS.js
    .js
  • resources/app.asar.unpacked/node_modules/font-list/libs/win32/index.js
    .js
  • resources/app.asar.unpacked/node_modules/font-list/package.json
  • resources/app.asar.unpacked/node_modules/lzma-native/LICENSE
  • resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs
    .sh .js linux polyglot
  • resources/app.asar.unpacked/node_modules/lzma-native/index.js
    .js
  • resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh
    .sh .vbs linux polyglot
  • resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh
    .sh .vbs linux polyglot
  • resources/app.asar.unpacked/node_modules/lzma-native/package.json
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-arm64/electron.napi.node
    .bundle macos arch:arm64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-arm64/node.napi.node
    .bundle macos arch:arm64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-x64/electron.napi.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-x64/node.napi.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/electron.napi.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/node.napi.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/electron.napi.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/node.napi.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/electron.napi.node
    .dll windows:6 windows x86 arch:x86

    31336b494231f4d2dfdafc717b522797


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/liblzma.dll
    .dll windows:4 windows x86 arch:x86

    2cf4836942d47fa0f21856740dc9a362


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/node.napi.node
    .dll windows:6 windows x86 arch:x86

    31336b494231f4d2dfdafc717b522797


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/electron.napi.node
    .dll windows:6 windows x64 arch:x64

    b0cc2d876678e554e432555c141be239


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/liblzma.dll
    .dll windows:4 windows x64 arch:x64

    d9a26efff0c7d4c7d938a91b5cf0e552


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/node.napi.node
    .dll windows:6 windows x64 arch:x64

    b0cc2d876678e554e432555c141be239


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/lzma-native/src/filter-array.cpp
  • resources/app.asar.unpacked/node_modules/lzma-native/src/index-parser.cpp
  • resources/app.asar.unpacked/node_modules/lzma-native/src/index-parser.h
  • resources/app.asar.unpacked/node_modules/lzma-native/src/liblzma-functions.cpp
  • resources/app.asar.unpacked/node_modules/lzma-native/src/liblzma-node.hpp
  • resources/app.asar.unpacked/node_modules/lzma-native/src/lzma-stream.cpp
  • resources/app.asar.unpacked/node_modules/lzma-native/src/module.cpp
  • resources/app.asar.unpacked/node_modules/lzma-native/src/mt-options.cpp
  • resources/app.asar.unpacked/node_modules/lzma-native/src/util.cpp
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    481c0920c0117990bc034e8b7d2cc98d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/Uninstall Heroic.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections