CyberEye[.]Builder[.]v1[.]0[.]3[.]HeartBeat[.]zip

resource
unpack001/CyberEye.Client.Builder.exe

CyberEye.Builder.v1.0.3.HeartBeat.zip

SHA256 62f8c9147c1b4972de47ff030135fb3d0d23d07bcbf1fea656e2792702627940
MD5 bc769f55ae79b57f74a1b35122116860
SHA1 3d10cbd1808fe26568e6638c48851447c85c41d3
SHA512 cb841b4a8194c4fc598b9acf3385a7e5c600b2d804ccf47d7c2708936d00ae00642dd2847817759727183f3e742c72df320308452282c17504e18fa844bb8628
SSDEEP 12288:YXAGiwd1SoAehGpe8mU7SqVy9NeD4/i5naCQefD:l4d19LX8gqV6e82atefD
TLSH
T113B42356C47B23FEC2D4593311B90D3B6C2858649786E8A1D5E78CBF29EF2185C83B6C
MD5 SHA1 SHA512 SSDEEP TLSH

CyberEye.Client.Builder.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 68863e8ee01a59f091e97f8b45f0be52c20b69bf51748ed731d12c75b855230b
MD5 4ea097f21d75b0717fb882bc9c03ec60
SHA1 19f73684e5c01940f34f8b49d8d1ae4ded40eac2
SHA512 432ed048dbe0f1f086fc74fdc3a533223dd429948c1a00b123de1286f0e0e7f3e29d1a3fbef6f77013581053989834db51f8f08cd10ff176fb74917b21117d15
SSDEEP 6144:xRcKpak2SHOO/PDrIboNaJqlNXGKzkngVrwVE4969:xlak7uwPDrI8NWicKIngdM9G
TLSH
T1B6841286B3E40153EBFA26F92831B5919BB1389AF461E6CC5CC114CE01EAF614EC5F57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

380518

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\pavli\Downloads\CyberEyeOff\CyberEye\CyberEye.Client.Builder\obj\Release\CyberEye.Client.Builder.pdb

Stub/Stub.il

SHA256 abd0d8d7bef0f33518f2f6465a6f386c6e6bcf8ed0e73c4e470e881af34a080b
MD5 859b505c847a50a0ec96a8fbb0328590
SHA1 ec45d63c467ab6fd041a52ced52e7e03b54779ec
SHA512 538feb5a59d4f29296f8f2849bd0256ab1c049945db343dd02762d4c56c23c37e035ac2793a97de2697b51bf83140371e081965484b923146ef090d14387316d
SSDEEP 12288:GQDScmToCTRUKJefUUNK0LqDEE/9rUaNiK0TmVwLUlf63sl6p/D/dY+vmk5XEN7G:h8I
TLSH
T1E455512943286A5AE8B2215D7A30D766F37EA16B1D21ACC27CEFC3547F32549423173B
MD5 SHA1 SHA512 SSDEEP TLSH

Stub/Stub.res

SHA256 6d35491b15f4b0dba8c6a26a1b985c3e6edcb2c0904a60c560099c6e40d2a946
MD5 c5a9173dc2a14e8001c0d8b622da16e3
SHA1 68813daab4892481387cfcf46884364e4c133935
SHA512 f48de66ea317f1def4c981e2198f80103dd60f5b77354657312ce79539fec00f839c45c03bd4d3f38bd33d091d9fb119fc0fb3e746df25c3f6e35e45052dbc53
TLSH
T1B1318B80A3EC410CFAF34FB87FB45271A565BD269C3A816F7858115E2F31650C9B3272
MD5 SHA1 SHA512 TLSH

Stub/TelegramRAT.Properties.Resources.resources

SHA256 e13ed2c59366d0eea74863fd71a81f0cb977cce1edfde304fc538690a4f6ac89
MD5 cd7dbc7abeda9893ce25793744443958
SHA1 dbbbbe2694d4b9b990881f279b4313574dbeac9b
SHA512 e880f131ff460384940248ab2ecd97189ae0b7169fe5246440dfbce32f295cbd7697ce2ee65b434a0e40be91b91c21b2c14b1f446b2b1650d0a5d94c0d4f37ef
TLSH
T1AEC08C36130C60B6CA621E7B241875C2122BD619D538296CDCA9223CAFF2317DBD3E62
MD5 SHA1 SHA512 TLSH