C:\Users\Administrator\source\repos\MFCTest\MFCTest - UCver\x64\Release\Heist_Editor_UCver.pdb
Static task
static1
1 signatures
General
-
Target
Heist_Editor_1.6_by_Depenx.exe
-
Size
181KB
-
MD5
9e520b438b7e1f11cf6ae9720269d065
-
SHA1
66be430339945fc1eba4e79cc3d73288b5f30699
-
SHA256
5eb537468ac1966c743a7167da4ce48b1c57db16a61c084d9922189300dccd9e
-
SHA512
2878dbec2a3f66673301743e575f595dd00ea17d5f5ab7140b0182e193a5c40893ba5ac289ab78996fcacc0438bddadb0113bd5d2331b8fa0a6727ebf630de77
-
SSDEEP
3072:2NRBR5UhAmm/cVNHkFB8Yfen+pBsrNvNrGQoH+F:qlQXDEZBxB
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Heist_Editor_1.6_by_Depenx.exe
Files
-
Heist_Editor_1.6_by_Depenx.exe.exe windows:6 windows x64 arch:x64
ed0c5464f5560ae3e0ca443082ef0c47
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
mfc140
ord11037
ord10117
ord3300
ord3299
ord3066
ord6226
ord1367
ord878
ord4714
ord14128
ord2207
ord5653
ord2473
ord2899
ord4903
ord4938
ord300
ord310
ord1507
ord8374
ord8128
ord4756
ord11575
ord3705
ord3710
ord11719
ord8792
ord11366
ord11365
ord5435
ord9936
ord9932
ord9934
ord9935
ord9933
ord14279
ord7881
ord9903
ord3202
ord3205
ord6266
ord450
ord11803
ord8888
ord9016
ord7206
ord1032
ord316
ord6299
ord3748
ord8862
ord9898
ord7890
ord5211
ord7420
ord10657
ord7430
ord4741
ord5213
ord5067
ord5539
ord5323
ord9001
ord5536
ord5347
ord5064
ord2264
ord6229
ord8863
ord2173
ord1089
ord4648
ord940
ord3943
ord1087
ord6590
ord981
ord13469
ord6101
ord14208
ord6102
ord14209
ord6100
ord14207
ord7688
ord12160
ord14007
ord11615
ord11614
ord2004
ord7637
ord12571
ord3941
ord4002
ord9049
ord14133
ord7619
ord14135
ord12171
ord12170
ord2437
ord10026
ord5167
ord7989
ord7685
ord4436
ord12490
ord12552
ord10079
ord11877
ord8050
ord1446
ord7363
ord8131
ord13050
ord7431
ord8693
ord4803
ord11849
ord11881
ord7888
ord11869
ord5687
ord3723
ord4848
ord4771
ord4826
ord4842
ord4783
ord4789
ord2695
ord13327
ord5980
ord11761
ord4795
ord4777
ord4832
ord4765
ord1750
ord1729
ord1743
ord1717
ord10680
ord11798
ord3165
ord3270
ord3271
ord3804
ord11754
ord2627
ord5224
ord13689
ord7519
ord5704
ord1695
ord13284
ord11357
ord6607
ord8413
ord14134
ord7620
ord14136
ord2962
ord11888
ord11892
ord4343
ord13438
ord9343
ord5566
ord3166
ord4351
ord7028
ord4817
ord10644
ord6703
ord5049
ord8618
ord2368
ord2182
kernel32
GetCurrentProcess
Module32Next
OpenProcess
WriteProcessMemory
Sleep
Process32Next
OutputDebugStringW
CloseHandle
CreateToolhelp32Snapshot
InitializeSListHead
ReadProcessMemory
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
TerminateProcess
TerminateThread
CreateThread
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
user32
GetClientRect
AppendMenuA
SendMessageA
LoadIconW
RegisterHotKey
KillTimer
DrawIcon
GetSystemMetrics
keybd_event
UnregisterHotKey
GetSystemMenu
FindWindowA
IsIconic
SetForegroundWindow
EnableWindow
SetTimer
gdi32
CreatePatternBrush
comctl32
InitCommonControlsEx
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
memset
memmove
__std_exception_destroy
__std_exception_copy
memcpy
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_c_exit
_configure_narrow_argv
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_initialize_onexit_table
terminate
_cexit
_crt_atexit
_register_onexit_function
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
free
_callnewh
_set_new_mode
malloc
api-ms-win-crt-convert-l1-1-0
strtoul
atoll
atol
atof
atoi
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_setmbcp
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ