topaz_video_1.4.1.zip
- SHA256 8df394f6a562a8361b62673e25f63e7097370b9c63c5d141540119005aef9ff8
Password
infected
Overview
overview
8Static
static
3topaz_video_1.4.1.zip
windows10-2004-x64
1topaz_video_1.4.1.zip
windows11-ltsc_2024-x64
8Topaz Video 1.4.1.exe
windows10-2004-x64
7Topaz Video 1.4.1.exe
windows11-ltsc_2024-x64
8_About.txt
windows10-2004-x64
1_About.txt
windows11-ltsc_2024-x64
8_Readme.txt
windows10-2004-x64
1_Readme.txt
windows11-ltsc_2024-x64
1_Silent Install.cmd
windows10-2004-x64
7_Silent Install.cmd
windows11-ltsc_2024-x64
7_Unpack Portable.cmd
windows10-2004-x64
7_Unpack Portable.cmd
windows11-ltsc_2024-x64
7Описание.txt
windows10-2004-x64
1Описание.txt
windows11-ltsc_2024-x64
1Behavioral task
behavioral1
Sample
topaz_video_1.4.1.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
topaz_video_1.4.1.zip
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
Topaz Video 1.4.1.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
20 signatures
150 seconds
Behavioral task
behavioral4
Sample
Topaz Video 1.4.1.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
19 signatures
150 seconds
Behavioral task
behavioral5
Sample
_About.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
_About.txt
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
Behavioral task
behavioral7
Sample
_Readme.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
_Readme.txt
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
_Silent Install.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral10
Sample
_Silent Install.cmd
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
Behavioral task
behavioral11
Sample
_Unpack Portable.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral12
Sample
_Unpack Portable.cmd
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral13
Sample
Описание.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Описание.txt
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target topaz_video_1.4.1.zip
- Size 198.3MB
- Sample260702-tqa2asew2k
- SHA256 8df394f6a562a8361b62673e25f63e7097370b9c63c5d141540119005aef9ff8
- MD5 70b168fc4c08bdca70e5a4fc662cd79c
- SHA1 1ec2e316cdfa573c9db724b7913144c88796061e
- SHA512 6862a270a21fc9319b926cc6fe7a7e5805e885275b8f65682f6fcac220fa19b4fe1572a7ef863e224860ce1466ac9b94e1f2ed036b1ac2209940a7dc3d12b8ba
- SSDEEP 6291456:6+hLVGS1ukNz9AMAMFVEsaGrqRPD2rXedk:6EX13FFVBB6PDoeW
- TLSH T152A833858D2CDE19D91E60F7983AB704C4D2315B7BF2A359EF0C6C422539B7CAC25EA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Topaz Video 1.4.1.exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/Topaz Video 1.4.1.exe innosetup
File Explorer
-
topaz_video_1.4.1.zip.zip 198.3MB
-
Topaz Video 1.4.1.exe.exe 198.3MB
-
_About.txt2KB
-
_Readme.txt2KB
-
_Silent Install.cmd.cmd .bat 1KB
-
_Unpack Portable.cmd.cmd .bat 1KB
-
Описание.txt4KB
Topaz Video 1.4.1.exe
- SHA256 2e64cd510d4fc91add46b40bdbc2916a5e7ca640b2a93329bc64e98c5da88277
- MD5 aadf9f6478b7aa6e56f9fc68c59f9d7c
- SHA1 2ff4f52c89b36a2f188cb49866e6406cd954dc24
- SHA512 8cebba9858d1b0821d51e99651df6b06ba3085504310469c42f50a6cc7237bf8af612da6a47b2f9e23f9a47ab97e285bc02801e603b5609a16453957075d3c48
- SSDEEP 3145728:nGisjvDF4jrt00qabXtlTWgPU6AffgT9H+HqqlHSPvSy9fA8p1pdAhyxvad35:nGNDF4jB8abdlyEV+/yH3rpdTxvad35
- TLSH T177A833828C2CDA67E22DA4F7843AB704D4D2795B6EF1934A5F0C6C431939B789C24FE5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Password
infected
Minor OS version
0
Major OS version
1
Entry point
39956
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
_About.txt
- SHA256 5a7b15f43785196b78da393bc48d6c566297c4490ccaf6b48dfc38423edd7956
- MD5 a79a9083a0ba728c919f9cfe618ed017
- SHA1 b121232888f1e7f0c1ac64a7e268c412a14548e1
- SHA512 0d81a9f8ebd0dd98e3e85f57f936091f8e0120b4caeb9839def03eced408ac07391ce5e7ac6ee1213b194de10dd66e9b074e8019ed1b19659f5088a12c2c9d00
- TLSH T10741236005C61DBF65117207CE1D6AC8FF5924FE37B6532D35A03A2A21FE824863D9DD
- MD5 SHA1 SHA512 TLSH
_Readme.txt
- SHA256 82f4ea59fbcd5309eba8ce9893ee5243134dd22939c84902ca08d6aa8aa45fa9
- MD5 b62006957bb105bfd1ef744bd264ae93
- SHA1 d3f217508ef88559afa1501425a4899744a742fc
- SHA512 fd8ebf004a797935a8bc057b277ce363047ba69f8bebeaff4976ae8f03fe2ba8ad66c0b65ba422a4f03a8de0fd88e26ef992eac86461da6b43f2a2bf1ad3f10d
- TLSH T17D514F47C36E6C6D4140B00BE90DBECAFA6B15BD7B7983127028387E33ED479862811D
- MD5 SHA1 SHA512 TLSH
_Silent Install.cmd
- SHA256 3d3b33f48f95872c83d886a0150116516fbff4bcb55c07b52c6f198a512403f0
- MD5 ba4d129fbed3f8785ed3e2398265a719
- SHA1 3ea6781ff6acf6813064614c61ca999509794b10
- SHA512 63e0bc2be83c128192fd310c8a7159236c52c9c6b48a7cb379498c1e2b7b11da69ff778f55087232b20d61df269086bd326884836c604ca86f04c8daa8bb0de5
- TLSH T12D115A373670E54C93B40FC42D748522742122DB2DB20D50B4BF403B83A06C8386DF9B
- MD5 SHA1 SHA512 TLSH
_Unpack Portable.cmd
- SHA256 9ddab87e2201728a6f7dffde380c358524f54c778199bcc2c9c0d171edadddac
- MD5 e895fa370305be60a6b9b507038f82b4
- SHA1 18a6622ee3c915e60199f09639b6f3b950fe0588
- SHA512 bf44156fcb47b23dc9b6139902cc3f1b567e4e77eb593fd1c52e23c9d440f07e41e3b85f0a4fe62f8cc730860bef55af889334e6a869bd885a138ea5e5e7a7c9
- TLSH T170115A273670E54C93B40FC42D748522B47122DB2CB20D50B0BF403B83A16C9386DB9F
- MD5 SHA1 SHA512 TLSH
Описание.txt
- SHA256 660312a6df3978d973bf5ffbdd0d3e672f04a9418ab519e92d3baa73891baf99
- MD5 6e1a61370c1ba0e21aa556bba93f35e0
- SHA1 225586f2381aafbb38acfd87068c875b740eafd0
- SHA512 8e210d129be08f8b5183c731241f48ffccfd0edff1b7655ffe565c83935da0006a411fa07d6d76cdd72cb647b9d80bf8e12edcc400596dae5034c6239926c987
- SSDEEP 48:HAkdrEI7H1r8jnWKUenx+rDQ/+0z5FsG+Zfgbi6q+AzeSXu6YOd1/a8vLBjMSndd:VWWIYD4vsGDieAzDT1ZvGQNgDs+K9
- TLSH T1438128B056AA24AB1111F44BD9047E0DB8AB40FF3F9E572739D83C7A37F20648579A19
- MD5 SHA1 SHA512 SSDEEP TLSH