Static task
static1
Behavioral task
behavioral1
Sample
DaVinci_Resolve_18.6.6_Windows.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
DaVinci_Resolve_18.6.6_Windows.exe
Resource
win10v2004-20240704-en
General
-
Target
DaVinci_Resolve_18.6.6_Windows.zip
-
Size
2057.0MB
-
MD5
6ea18e4e9f489dddbb99bd40e25ba71d
-
SHA1
02458ed9db6011e71d666097c46a85aed391b8ff
-
SHA256
c9cb7faa71da519c8794aa5f8202a803e76f55013bfbafdac6aa2f7cb35bd993
-
SHA512
e49f410c19f51d12bbd9dab6c03575346f0c8703feaf6c11f2023f3b997f2c29d5fe8f9f6023391beb3245663abbe24f1952fcbe030657f0470b2d919d4916d6
-
SSDEEP
50331648:S1LVAP1S/7mhc82GA+KUSwHjq2azzHu1VfB3GWYVVE1bYsX20oguSQU/J:SPAP+ePA+LHjq3zHwLGWYVi1brjo8H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DaVinci_Resolve_18.6.6_Windows.exe
Files
-
DaVinci_Resolve_18.6.6_Windows.zip.zip
-
DaVinci_Resolve_18.6.6_Windows.exe.exe windows:6 windows x64 arch:x64
fa6b11c0eb204b46890ac09f2ecc6293
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
SysAllocStringLen
VariantClear
SysStringLen
user32
SetWindowLongPtrW
GetWindowLongPtrW
GetDlgItem
DialogBoxParamW
KillTimer
CharUpperW
SetWindowTextW
EndDialog
ShowWindow
DestroyWindow
PostMessageW
GetWindowThreadProcessId
EnumWindows
MessageBoxW
AllowSetForegroundWindow
SetForegroundWindow
SetActiveWindow
SendMessageW
LoadIconW
LoadStringW
SetTimer
shell32
ShellExecuteExW
kernel32
GetCurrentProcess
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
GetProcessHeap
GetStringTypeW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineW
CloseHandle
GetLastError
WaitForSingleObject
CreateProcessW
GetProcessId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
LocalFree
FormatMessageW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
SetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetSystemDirectoryW
GetModuleHandleW
GetProcAddress
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetModuleHandleA
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GlobalMemoryStatusEx
GetSystemInfo
GetProcessAffinityMask
GetStdHandle
GetFileInformationByHandle
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
GetVersionExW
lstrcatW
lstrlenW
InitializeCriticalSection
SetEvent
ResetEvent
CreateEventW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ