Trapcode Suite 16[.]0[.]0 Installer[.]exe

Resubmissions

19/07/2026, 08:12

260719-j36cvsfv3n

19/07/2026, 08:09

260719-j2ethsft9j3

Sharing

Copy URL Twitter E-mail

General

Target
Trapcode Suite 16.0.0 Installer.exe
Size 2.8MB
Sample260719-j36cvsfv3n
SHA256 22b21ab9b23004e4f7d256319f30045a203276ed7f73964170470e753ee5da94
MD5 eb6b06c17f3a5ba2f811c73d2db50dd5
SHA1 2ae10be79520af46888fa3bc8b86454aa3111ca0
SHA512 97a77fabc3f40acfcea4c86b91c9ac396e7684d9539f3b679d9333844c7012bdcd2ddab600989efa6532b64b6a0a4dd1ff18b87af1e22b95c52a690d50d39ab7
SSDEEP 24576:MzZMIhbIdOnpXD+drZP7AfEwOMaqT3TSd+h4gzJbMJTtE+xnsrYLt6iSdMvOY9Yd:MOdOpXDyFIElM53TOs2hE+x+YLt5IP
TLSH
T136D5481A11973EDEF8F6D2389572E902D23DBDC503A28EDF1B9039661F762A07E35604
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
Trapcode Suite 16.0.0 Installer.exe

File Explorer

Trapcode Suite 16.0.0 Installer.exe

.exe 2.8MB

Trapcode Suite 16.0.0 Installer.exe

IMPHASH ef80c386082a76b54678a06a57afda85
SHA256 22b21ab9b23004e4f7d256319f30045a203276ed7f73964170470e753ee5da94
MD5 eb6b06c17f3a5ba2f811c73d2db50dd5
SHA1 2ae10be79520af46888fa3bc8b86454aa3111ca0
SHA512 97a77fabc3f40acfcea4c86b91c9ac396e7684d9539f3b679d9333844c7012bdcd2ddab600989efa6532b64b6a0a4dd1ff18b87af1e22b95c52a690d50d39ab7
SSDEEP 24576:MzZMIhbIdOnpXD+drZP7AfEwOMaqT3TSd+h4gzJbMJTtE+xnsrYLt6iSdMvOY9Yd:MOdOpXDyFIElM53TOs2hE+x+YLt5IP
TLSH
T136D5481A11973EDEF8F6D2389572E902D23DBDC503A28EDF1B9039661F762A07E35604
MD5 SHA1 SHA512 SSDEEP TLSH

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

91:c3:d7:2e:24:12:5c:ae:5a:f0:8c:03:fe:cb:b4:b6:c2:da:da:d3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Red Giant LLC,O=Red Giant LLC,L=Beaverton,ST=Oregon,C=US

Chains

Nov 18, 2020

CN=Red Giant LLC,O=Red Giant LLC,L=Beaverton,ST=Oregon,C=US

CN=Trustwave Code Signing SHA256 CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US,1.2.840.113549.1.9.1=#0c106361407472757374776176652e636f6d

CN=SecureTrust CA,O=SecureTrust Corporation,C=US

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=Trustwave Code Signing SHA256 CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US,1.2.840.113549.1.9.1=#0c106361407472757374776176652e636f6d

Serial Number

a4:23:c0:04:a9:c7:70:15:42:30:e5:d2:71:be:06:54

Issuer

CN=SecureTrust CA,O=SecureTrust Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 1, 2016 - Sep 29, 2024

Subject

CN=Red Giant LLC,O=Red Giant LLC,L=Beaverton,ST=Oregon,C=US

Serial Number

07:2d:b9:66:93:39:d6:bc:c1:4e:5a:d3:1c:86:3e:7f:83:63:35

Issuer

CN=Trustwave Code Signing SHA256 CA\, Level 1,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US,1.2.840.113549.1.9.1=#0c106361407472757374776176652e636f6d

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 23, 2020 - Sep 26, 2022

Minor OS version

Major OS version

Entry point

887904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Z:\TCS\stage\Trapcode Suite Installer.pdb

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

kernel32

GetModuleHandleW VerifyVersionInfoW VerSetConditionMask SetLastError CreateDirectoryW CreateFileW LocalFree GetCurrentProcess FreeLibrary lstrcmpiW FindResourceW LoadLibraryExW GetModuleFileNameW GetCommandLineW CreateMutexA TlsAlloc TlsGetValue TlsSetValue TlsFree FindClose FindFirstFileA FindNextFileA OutputDebugStringA lstrcpyA lstrcatA lstrlenA LoadLibraryExA GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetEnvironmentVariableW SetStdHandle FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetCurrentThreadId GetDateFormatW GetFileSizeEx GetConsoleCP GetStdHandle GetTimeZoneInformation ExitProcess CreateProcessW GetModuleHandleExW ExitThread ReadConsoleW GetConsoleMode FileTimeToSystemTime CreateEventA PeekNamedPipe GetFileType GetDriveTypeW RtlPcToFileHeader RtlUnwindEx DuplicateHandle FreeLibraryAndExitThread GetThreadTimes GetCurrentThread CreateThread LoadResource LockResource FreeResource GetSystemDefaultLocaleName GetModuleHandleA GetCurrentDirectoryA FindResourceA GetUserDefaultLocaleName SizeofResource GetModuleFileNameA GetTimeFormatW SetEvent QueryPerformanceCounter CreateProcessA QueryPerformanceFrequency WaitForSingleObject GetEnvironmentVariableA CreatePipe SetHandleInformation GetProcAddress GetCurrentDirectoryW LoadLibraryW GetFileAttributesA InitializeCriticalSection LeaveCriticalSection EnterCriticalSection CreateFileA Sleep WriteFile WaitNamedPipeA SetNamedPipeHandleState ReadFile RemoveDirectoryA MultiByteToWideChar WideCharToMultiByte K32GetModuleFileNameExA K32EnumProcessModules K32EnumProcesses CloseHandle GetExitCodeProcess OpenProcess GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList ResumeThread ReleaseSemaphore InitializeSListHead EncodePointer OutputDebugStringW InitializeCriticalSectionEx HeapFree OpenEventA AreFileApisANSI MoveFileExW CopyFileW CreateDirectoryExW DeviceIoControl SetFilePointerEx FreeEnvironmentStringsW WriteConsoleW SystemTimeToTzSpecificLocalTime RtlUnwind IsDebuggerPresent WaitForSingleObjectEx GetExitCodeThread SetEndOfFile GetFullPathNameW GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW FindNextFileW FindFirstFileW DeleteFileW GetCurrentProcessId GetStartupInfoW IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext ResetEvent GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetSystemTimeAsFileTime CreateEventW InitializeCriticalSectionAndSpinCount FormatMessageA

user32

UnregisterClassW SendMessageTimeoutA GetClientRect CharNextW IsWindowEnabled CopyRect DrawTextA FillRect DispatchMessageW InvalidateRect SendMessageW LoadBitmapW SetRect BeginPaint EndPaint DefWindowProcW SetWindowLongPtrW GetWindowLongPtrW CallWindowProcW LoadIconW DestroyWindow PostQuitMessage GetWindowRect KillTimer MoveWindow GetTopWindow GetWindow ShowWindow CreateWindowExW RedrawWindow SendMessageA SetWindowPos MapWindowPoints GetParent GetMonitorInfoW MonitorFromWindow GetWindowLongW GetActiveWindow RegisterClassExW GetClassInfoExW LoadCursorW MessageBoxA MessageBeep EnableWindow SetTimer GetMessageW TranslateMessage PeekMessageW

gdi32

CreateFontIndirectA CreateSolidBrush GetObjectW BitBlt DeleteObject CreateCompatibleDC SetBkColor SetTextColor SelectObject SetBkMode DeleteDC

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

GetSecurityInfo RegOpenKeyExA OpenProcessToken GetTokenInformation RegGetValueA RegEnumKeyExA RegCloseKey RegSetValueExA ReportEventA RegisterEventSourceA DeregisterEventSource RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegDeleteKeyW FreeSid SetSecurityInfo SetEntriesInAclW AllocateAndInitializeSid RegSetKeyValueA CloseServiceHandle OpenServiceA OpenSCManagerW GetUserNameA RegCreateKeyExA

shell32

ShellExecuteA CommandLineToArgvW SHGetFolderPathA

ole32

CoCreateInstance OleUninitialize OleInitialize CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoInitialize

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

rpcrt4

UuidCreate RpcStringFreeA UuidToStringA

gdiplus

GdipDeleteBrush GdipCreatePen1 GdipDeletePen GdipSetPenMode GdipCreatePath GdipDeletePath GdipAlloc GdipClosePathFigure GdipAddPathArcI GdipCreateFromHDC GdipDeleteGraphics GdipSetSmoothingMode GdipSetPageUnit GdipDrawPath GdipFillRectangleI GdipFillPath GdiplusStartup GdiplusShutdown GdipFree GdipCloneBrush GdipResetPath GdipCreateSolidFill

secur32

GetUserNameExA

ws2_32

WSACleanup WSAGetLastError inet_addr WSAStartup gethostbyname gethostbyaddr socket htons closesocket sendto

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

268KB

Virtual Size

267KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=16, id=259, version=26715,

count=218, id=261, version=26715,

count=8, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=7, id=199, version=41118,

count=18, id=260, version=28920,

count=10, id=259, version=28920,

count=155, id=261, version=28920,

count=25, id=260, version=26715,

count=1, id=262, version=26715,

count=30, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,

count=8, id=206, productName=VS2012 build 50727, version=50727,

count=1, id=205, productName=VS2012 build 50727, version=50727,

count=33, id=257, version=26715,

count=373, id=1, productName=Unmarked objects,

count=69, id=265, version=29111,

count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,

count=1, id=151,

count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,