HeroPartyMustFall[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
HeroPartyMustFall.exe
Size 100KB
Sample260813-2ld66adg86
SHA256 559d5ca234a68bac5a9b1130f9ec73512c1a20178daf0ce04154cbe83dcd32fe
MD5 3a219be977ce990c814236ca650046bb
SHA1 3a702f3783ad8ae6c76fd0fbd09d3e7239d3faf5
SHA512 4821176ca825a7e2fff2774e91c09602076755404c0170e85f8832fc15edea1648a2f25bc36e307445b2f2364904f6f8c801bc3c9bee19f1a2ecb5275834e2cc
SSDEEP 3072:PpAZA63Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:hAZAUQ+IFCumUGekHRvEuO3go9kfnQ
TLSH
T177A3020AEB47257EE432847866D75ABB8BB1FB1314604C0ECA14DD359F57AC1EC33629
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HeroPartyMustFall.exe

File Explorer

HeroPartyMustFall.exe

.exe 100KB

HeroPartyMustFall.exe

IMPHASH 99c7d7362e48495cd32aa3eca4b48100
SHA256 559d5ca234a68bac5a9b1130f9ec73512c1a20178daf0ce04154cbe83dcd32fe
MD5 3a219be977ce990c814236ca650046bb
SHA1 3a702f3783ad8ae6c76fd0fbd09d3e7239d3faf5
SHA512 4821176ca825a7e2fff2774e91c09602076755404c0170e85f8832fc15edea1648a2f25bc36e307445b2f2364904f6f8c801bc3c9bee19f1a2ecb5275834e2cc
SSDEEP 3072:PpAZA63Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQ:hAZAUQ+IFCumUGekHRvEuO3go9kfnQ
TLSH
T177A3020AEB47257EE432847866D75ABB8BB1FB1314604C0ECA14DD359F57AC1EC33629
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

HeroPartyMustFall.exe

kernel32

msvcrt

user32

generic