Resubmissions

05/05/2023, 16:47

230505-vajtyabe59 4

General

  • Target

    Wondershare Filmora 12.3.0.2341 (x64) Multilingual [FileCR].zip

  • Size

    512.2MB

  • MD5

    49e5e11a3964a4b575f61789d8c9bcc9

  • SHA1

    980f59509533377c0c2ad849dc14d29e4b65c3a1

  • SHA256

    d9025b7935a1b99e538045dd84f360decb7e32af42e9319b6fe5ce766f8a7363

  • SHA512

    cdb3062d7b016807992efbe856659d6b87aaedf4bf96837ed7d6db0b98f99a56e2d869285758c2def57595a9b86647e8bff287f531ee13ef602c7cd3c15125f6

  • SSDEEP

    12582912:4jSbaMRqD714OIJ5xYweJ+DpMetP31EGa/HV21MCsbnjtYdOm6NXshZP:4Sq7FsK4FEG+1EMCsbZy6NGP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Wondershare Filmora 12.3.0.2341 (x64) Multilingual [FileCR].zip
    .zip .ps1

    Password: 123

  • Wondershare Filmora 12.3.0.2341 (x64) Multilingual/BorisFX_&_NewblueFX.7z
    .7z

    Password: 123

  • BorisFX_&_NewblueFX/CRK/Continuum_OFX_8Bit.dll
    .dll windows x64

    Password: 123

    754deaafadadc5bd8c4214e2fcc61568


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BorisFX_&_NewblueFX/CRK/Continuum_OFX_Float.dll
    .dll windows x64

    Password: 123

    7583d6ecd7f63e9683fde178e426defc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Wondershare Filmora 12.3.0.2341 (x64) Multilingual/filmora_64bit_12.3.0_gray_full846.exe
    .exe windows x86

    Password: 123

    483f0c4259a9148c34961abbda6146c1


    Code Sign

    Headers

    Imports

    Sections

  • Wondershare Filmora 12.3.0.2341 (x64) Multilingual/patch password.txt
  • Wondershare Filmora 12.3.0.2341 (x64) Multilingual/wfilmorav12302341-zmco.exe
    .exe windows x86

    Password: 123


    Headers

    Sections

  • Wondershare Filmora 12.3.0.2341 (x64) Multilingual/zmco.nfo