Static task
static1
Behavioral task
behavioral1
Sample
DaVinci_Resolve_18.6.5_Windows.exe
Resource
win11-20240214-en
Errors
General
-
Target
DaVinci_Resolve_18.6.5_Windows.zip
-
Size
2056.8MB
-
MD5
cb34824f432d94e50a0bd6289a3ccddf
-
SHA1
9708d887092c6b36ca507b22986e6ca579add454
-
SHA256
e3e37483861f9b8febb3f2fc41b26b3c6e661fedb92e671c15ef991c201d2f11
-
SHA512
702b6b1a537b550f8110dd7b05a47e4a56555f66634c2d61cf36dbb764b7dab0244044d8a7c82e95c1320ddedd06d51ba8c97d0c7391cac8aec4f6b5505ba010
-
SSDEEP
50331648:PiXuJJvApZgewpQI+jdHZ59bNkCqaFG2EbyR3Ogy3YCVf2AJKcWDtKBc6:XQpeeaQPZhNkmFGBQOgy3JVfXt22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DaVinci_Resolve_18.6.5_Windows.exe
Files
-
DaVinci_Resolve_18.6.5_Windows.zip.zip
-
DaVinci_Resolve_18.6.5_Windows.exe.exe windows:6 windows x64 arch:x64
fa6b11c0eb204b46890ac09f2ecc6293
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
SysAllocStringLen
VariantClear
SysStringLen
user32
SetWindowLongPtrW
GetWindowLongPtrW
GetDlgItem
DialogBoxParamW
KillTimer
CharUpperW
SetWindowTextW
EndDialog
ShowWindow
DestroyWindow
PostMessageW
GetWindowThreadProcessId
EnumWindows
MessageBoxW
AllowSetForegroundWindow
SetForegroundWindow
SetActiveWindow
SendMessageW
LoadIconW
LoadStringW
SetTimer
shell32
ShellExecuteExW
kernel32
GetCurrentProcess
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
GetProcessHeap
GetStringTypeW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineW
CloseHandle
GetLastError
WaitForSingleObject
CreateProcessW
GetProcessId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
LocalFree
FormatMessageW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
SetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetSystemDirectoryW
GetModuleHandleW
GetProcAddress
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetModuleHandleA
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GlobalMemoryStatusEx
GetSystemInfo
GetProcessAffinityMask
GetStdHandle
GetFileInformationByHandle
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
GetVersionExW
lstrcatW
lstrlenW
InitializeCriticalSection
SetEvent
ResetEvent
CreateEventW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ