Adobe Premiere Pro[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Adobe Premiere Pro.exe
Size 7.2MB
Sample260508-eax4kags9l
SHA256 ba6535fef6d2b99e0172eab5663582f6a1e48aeb23f188f41a131985e7a85acf
MD5 536dfaa94c0bd6111fd130acf1c7fdf9
SHA1 fbc747ad814ab9f8c3978c378ec5c7bb60e8d5b8
SHA512 54306ed93e1eb6099008e0bf1b00982ad35be4ecbb269103baaf58b35ad306c0d996b7f29d0edc81a51dba3609cebbd96ca1eb1c51fa1e1fc527a5572e3ea65f
SSDEEP 3072:XRl++d0q/qdim+hHfn/oegc46N13KzMclgLR7kSCjijyVrKBtR4ayCAAE+v7MTgM:XRl++dfHfngegn1zMmgRapOv/QM4
TLSH
T15F76F920EBE4C0D1F20510BBDD15F5F66A823E66D8616DC7EFC17E2A3872E450AB582D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Adobe Premiere Pro.exe

.exe 7.2MB

Adobe Premiere Pro.exe

IMPHASH 00183444e4adb2d4aa98fe933543c066
SHA256 ba6535fef6d2b99e0172eab5663582f6a1e48aeb23f188f41a131985e7a85acf
MD5 536dfaa94c0bd6111fd130acf1c7fdf9
SHA1 fbc747ad814ab9f8c3978c378ec5c7bb60e8d5b8
SHA512 54306ed93e1eb6099008e0bf1b00982ad35be4ecbb269103baaf58b35ad306c0d996b7f29d0edc81a51dba3609cebbd96ca1eb1c51fa1e1fc527a5572e3ea65f
SSDEEP 3072:XRl++d0q/qdim+hHfn/oegc46N13KzMclgLR7kSCjijyVrKBtR4ayCAAE+v7MTgM:XRl++dfHfngegn1zMmgRapOv/QM4
TLSH
T15F76F920EBE4C0D1F20510BBDD15F5F66A823E66D8616DC7EFC17E2A3872E450AB582D
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

3e:43:36:be:18:f7:e7:28:8d:82:4b:eb:4c:69:64:90:ad:af:5b:d6:29:26:db:fb:1d:11:b2:0f:13:0f:b8:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Premiere Pro\, AME\, After Effects\, Speedgrade,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Apr 29, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

06:cc:02:f2:4a:13:7e:b9:5e:b0:9d:39:af:d1:e3:3f

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 6, 2025 - Oct 5, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

46108

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\releases\dva\build\mb\msvs_win32_x64\Release\x64\build\PremierePro\PremierePro\PremierePro\Adobe Premiere Pro.pdb

kernel32

SetErrorMode GetProcAddress LoadLibraryW AcquireSRWLockExclusive LoadLibraryExW GetModuleFileNameW FreeLibrary WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext FormatMessageW GetProcessHeap HeapFree HeapAlloc InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter TerminateProcess GetCurrentProcess GetModuleHandleW IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry ReleaseSRWLockExclusive

shlwapi

PathAppendW PathRemoveFileSpecW

dvacore

?kAppIsHeadless@config@dvacore@@3PEBDEB ?kSuiteBrandingMinorVersion@config@dvacore@@3PEBDEB ?kSuiteBrandingVersion@config@dvacore@@3PEBDEB ?kSuiteVersion@config@dvacore@@3PEBDEB ?kAppBuildNumber@config@dvacore@@3PEBDEB ?kAppPatchVersion@config@dvacore@@3PEBDEB ?kAppMinorVersion@config@dvacore@@3PEBDEB ?kEnableFastExit@config@dvacore@@3PEBDEB ?kProcessExitStatus@config@dvacore@@3PEBDEB ?GetAppPrefsVersionString@versioninfo@dvacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?GetAppVersionString@versioninfo@dvacore@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?NotifyProcessEnd@ProcessBeginEndNotificationRegistry@config@dvacore@@QEAAXAEBV?$array@VParameter@detail@config@dvacore@@$0BC@@std@@@Z ?NotifyProcessBegin@ProcessBeginEndNotificationRegistry@config@dvacore@@QEAAXAEBV?$array@VParameter@detail@config@dvacore@@$0BC@@std@@@Z ?GetInstance@ProcessBeginEndNotificationRegistry@config@dvacore@@SAAEAV123@XZ ?LimitedDLLHijackFix@config@dvacore@@YAXXZ ?IsBetaPrime@config@dvacore@@YA_NXZ ?kAppMajorVersion@config@dvacore@@3PEBDEB ?kEnableAsyncInit@config@dvacore@@3PEBDEB ?Recycle@MemoryRecycler@allocator@dvacore@@YAXPEAX_K@Z ?Allocate@MemoryRecycler@allocator@dvacore@@YAPEAX_KAEA_K@Z ?kAppShortName@config@dvacore@@3PEBDEB

prm

?Initialize@PRM@@YAXW4ApplicationType@1@PEBD111_N@Z

frontend

?Run@FE@@YAHAEBV?$basic_string@_WU?$char_traits@_W@std@@U?$STLAllocator@_W@allocator@dvacore@@@std@@@Z

msvcp140

?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ ?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z _Mbrtowc

vcruntime140

__current_exception __current_exception_context __C_specific_handler memset __std_terminate memcpy _CxxThrowException __std_exception_copy __std_exception_destroy __std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _set_app_type _crt_at_quick_exit _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _cexit _invalid_parameter_noinfo _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _execute_onexit_table _invalid_parameter_noinfo_noreturn _register_onexit_function _errno _initialize_onexit_table abort _exit _seh_filter_dll terminate _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

calloc malloc free _set_new_mode _callnewh

api-ms-win-crt-string-l1-1-0

iswspace

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

ole32

CoInitializeEx

oleaut32

SysAllocString SysFreeString GetErrorInfo SetErrorInfo SysStringLen

Sharing

General

Malware Config

Signatures

File Explorer

Adobe Premiere Pro.exe

kernel32

shlwapi

dvacore

prm

frontend

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

ole32

oleaut32

generic