! AdobeAfterEffects26AllTrial_maxon.zip
- SHA256 023fcd76eab7da5000ad73e1ea0481a979be735621d5380e4dc95a4ddb2a9dcd
Overview
overview
8Static
static
3! AdobeAft...on.zip
windows11-ltsc_2024-x64
1! AdobeAft...on.zip
windows11-21h2-x64
12/support/...er.exe
windows11-ltsc_2024-x64
42/support/...er.exe
windows11-21h2-x64
42/support/...4D.exe
windows11-ltsc_2024-x64
32/support/...4D.exe
windows11-21h2-x64
32/support/...ce.cmd
windows11-ltsc_2024-x64
82/support/...ce.cmd
windows11-21h2-x64
3AdobeAfter...on.xml
windows11-ltsc_2024-x64
1AdobeAfter...on.xml
windows11-21h2-x64
8Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
! AdobeAfterEffects26AllTrial_maxon.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
! AdobeAfterEffects26AllTrial_maxon.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
2/support/keyfiles/CustomHook/win/Cinema 4D Installer.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
900 seconds
Behavioral task
behavioral4
Sample
2/support/keyfiles/CustomHook/win/Cinema 4D Installer.exe
Resource
win11-20260513-en
windows11-21h2-x64
6 signatures
900 seconds
Behavioral task
behavioral5
Sample
2/support/keyfiles/CustomHook/win/Cinema 4D.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
900 seconds
Behavioral task
behavioral6
Sample
2/support/keyfiles/CustomHook/win/Cinema 4D.exe
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
900 seconds
Behavioral task
behavioral7
Sample
2/support/keyfiles/CustomHook/win/RunOnce.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
15 signatures
900 seconds
Behavioral task
behavioral8
Sample
2/support/keyfiles/CustomHook/win/RunOnce.cmd
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
900 seconds
Behavioral task
behavioral9
Sample
AdobeAfterEffects26AllTrial_maxon.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
AdobeAfterEffects26AllTrial_maxon.xml
Resource
win11-20260513-en
windows11-21h2-x64
19 signatures
900 seconds
General
- Target ! AdobeAfterEffects26AllTrial_maxon.zip
- Size 497.1MB
- Sample260724-2amn6agk9x
- SHA256 023fcd76eab7da5000ad73e1ea0481a979be735621d5380e4dc95a4ddb2a9dcd
- MD5 2ccc88aa082d881f3ff874b3d3b98b0c
- SHA1 d491e5805b8e96498d4ca233eb78efdda380bafc
- SHA512 f2bf771c41ca97573576cd15165f4b53f82dbe424e616334ff3692b1228d97234e6b556a66c33573861fbcb5ed43f3d615c230045b9ebb572afbe3e7af365ee5
- SSDEEP 12582912:ef8Vym305HVf4EacgkW6+Xh/q8Z4WYXhv4ARqBS:hkB1xVuhy8Z4TxlRSS
- TLSH T1144933B73B26D6191A87A3652940C1F998F38661C67E42FF4E65FEEF085927F4C080B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2/support/keyfiles/CustomHook/win/Cinema 4D.exe
File Explorer
-
! AdobeAfterEffects26AllTrial_maxon.zip.zip 497.1MB
-
2/support/keyfiles/CustomHook/win/Cinema 4D Installer.exe.exe 487.8MB
-
2/support/keyfiles/CustomHook/win/Cinema 4D.exe.exe 11.0MB
-
2/support/keyfiles/CustomHook/win/RunOnce.cmd178B
-
AdobeAfterEffects26AllTrial_maxon.pimx.xml 1KB
2/support/keyfiles/CustomHook/win/Cinema 4D Installer.exe
- IMPHASH d49615a3eb128e46d517908fa72917e4
- SHA256 b79371b525bb9633b8c0f930746b9f8d916190eeb9d1fe93ce37b79dbedbc313
- MD5 d5af479efa0e0e78bb5dd1457398f75c
- SHA1 fb5138b9877a815d59645d57df3db353f192af40
- SHA512 edc262333c36c8bf12b2107d327a1cdf1453862347058e12fdebe1f488b489e8b73dc8bfd87910377f678eca7d91805568c1d9d0599681d377e5ea6ddc20e96d
- SSDEEP 12582912:h1SlUIBgtvnzjEUqQqi2ALvj02taugVzpIg9sBY:iyxz6zSvI2tat1z9aY
- TLSH T1B2393327F75310ACC66BC330479292B2BC72FC2441397BFE1A64EB352E65DA15B0E169
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:bb:66:ba:a3:1f:fe:7d:40:3a:fa:bf:4e:81:49:b0:f4:8c:e0:c3:c1:4c:74:1b:bd:52:4f:c5:33:f5:ea:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Premiere Pro\, AME\, After Effects\, Speedgrade,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jun 11, 2026
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Premiere Pro\, AME\, After Effects\, Speedgrade,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Premiere Pro\, AME\, After Effects\, Speedgrade,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Premiere Pro\, AME\, After Effects\, Speedgrade,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:cc:02:f2:4a:13:7e:b9:5e:b0:9d:39:af:d1:e3:3f
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 6, 2025 - Oct 5, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
5328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
GetSidIdentifierAuthority
GetUserNameA
GetUserNameW
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
SetNamedSecurityInfoW
comctl32
InitCommonControlsEx
comdlg32
ChooseColorW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
gdi32
Arc
BitBlt
Chord
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateFontIndirectW
CreatePalette
CreatePatternBrush
CreatePen
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
EnumFontFamiliesA
EnumFontFamiliesW
ExtCreatePen
ExtTextOutA
GetBkMode
GetCharWidthA
GetCharWidthW
GetDIBits
GetDeviceCaps
GetFontData
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetTextCharset
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextFaceW
GetTextMetricsA
OffsetClipRgn
PatBlt
Pie
Polygon
Polyline
RealizePalette
RectInRegion
Rectangle
ResizePalette
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetPaletteEntries
SetPolyFillMode
SetROP2
SetRectRgn
SetTextAlign
SetTextColor
StretchDIBits
TextOutA
TextOutW
TranslateCharsetInfo
UpdateColors
imm32
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
kernel32
BuildCommDCBA
BuildCommDCBW
ClearCommError
CloseHandle
CopyFileA
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreatePipe
CreateProcessA
CreateProcessW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EscapeCommFunction
ExitProcess
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FlushFileBuffers
FormatMessageA
FreeLibrary
GetACP
GetCommModemStatus
GetCommState
GetComputerNameA
GetComputerNameW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOverlappedResult
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByte
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LockResource
MapViewOfFile
MoveFileA
MoveFileW
MulDiv
MultiByteToWideChar
OutputDebugStringA
PeekConsoleInputA
PeekNamedPipe
PurgeComm
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseSemaphore
RemoveDirectoryA
RemoveDirectoryW
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SearchPathA
SearchPathW
SetCommState
SetCommTimeouts
SetConsoleMode
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleInformation
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SetupComm
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrcpyA
lstrcpyW
lstrlenW
msvcrt
__C_specific_handler
__argc
__argv
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_controlfp
_ctime64
_endthreadex
_environ
_errno
_fdopen
_fileno
_fmode
_ftime
_get_osfhandle
_gmtime64
_initterm
_localtime64
_lock
_mktime64
_onexit
_open
_stricmp
_strnicmp
_time64
_unlock
_vsnwprintf
_wcsicmp
_wcsnicmp
_wopen
abort
acos
asin
atan
atan2
atoi
calloc
cosh
exit
fclose
ferror
fflush
fprintf
fputc
fputs
fread
free
frexp
fseek
ftell
fwrite
getenv
isalnum
isalpha
islower
isprint
isspace
isupper
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
printf
puts
qsort
rand_s
realloc
setlocale
signal
sinh
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtoul
tan
tanh
tolower
toupper
vfprintf
vsprintf
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsncpy
_timezone
_hypot
_write
_tzset
_strnicmp
_stricmp
_strdup
_putenv
_isatty
_getpid
ole32
CreateBindCtx
CreateErrorInfo
CreateFileMoniker
GetRunningObjectTable
SetErrorInfo
oleaut32
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantInit
shell32
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListW
user32
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcA
CallWindowProcW
CharLowerA
CharLowerW
ClientToScreen
CloseClipboard
CreateCaret
CreateIconFromResource
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCaret
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawEdge
DrawFocusRect
DrawFrameControl
DrawMenuBar
EmptyClipboard
EnableWindow
EndPaint
EnumWindows
FillRect
GetAsyncKeyState
GetCapture
GetClassLongPtrA
GetClientRect
GetClipboardData
GetClipboardOwner
GetCursorPos
GetDC
GetDesktopWindow
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMessageA
GetMessagePos
GetParent
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextW
InsertMenuA
InsertMenuW
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsWindow
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
LoadIconA
MapVirtualKeyA
MessageBeep
MessageBoxA
MessageBoxW
MoveWindow
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClassExA
RegisterClassW
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
ScrollWindowEx
SendInput
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongPtrA
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetParent
SetScrollInfo
SetTimer
SetWindowLongPtrA
SetWindowLongPtrW
SetWindowPos
SetWindowTextA
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
ToAscii
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
VkKeyScanA
WaitForInputIdle
WindowFromPoint
wsprintfA
wsprintfW
ws2_32
WSAAsyncSelect
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
getpeername
getservbyname
getsockname
getsockopt
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohs
recv
select
send
setsockopt
socket
TclKit_AppInit
TclKit_SetKitPath
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
191KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
333KB
Virtual Size
332KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
110B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
2/support/keyfiles/CustomHook/win/Cinema 4D.exe
- IMPHASH d3bbfd624fcfeb095c7bf0242b723cee
- SHA256 5da7c2b840e86b8e991d06291abaf7a164e9ae0b8ceaf27b1a9ea5c08e5a05eb
- MD5 4722b314ba21f9753deb89e1457217c6
- SHA1 04db542c44dc2016150a46ee47d0d09af78edcaa
- SHA512 5f962549c1a97b3b748395bef6b38b7416df501905a5487298a4793a7ba62482a5b08857921f522080d093bc20616646da053a976625014541a1343b108e3f8c
- SSDEEP 196608:cTEf9mYgDn7D9+gyczO/nF/ZQDD4rM/FeEn0YduDMTxhs0FSPkGzEn3q:cTQc5Dnf9+q4F/ZQDUQ/oEwMSPkG83q
- TLSH T177C633AA337455FBE4925674C431E548D773B2896701F28F80318BF2EF17A989E35BA0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
127052
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
shell32
ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
SHGetMalloc
gdi32
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
GetCurrentObject
StretchBlt
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
GetObjectW
advapi32
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
user32
EnableMenuItem
IsWindow
EnableWindow
MessageBeep
LoadIconW
LoadImageW
SetWindowsHookExW
PtInRect
CallNextHookEx
DefWindowProcW
CallWindowProcW
DrawIconEx
DialogBoxIndirectParamW
GetWindow
ClientToScreen
GetDC
DrawTextW
SystemParametersInfoW
GetSystemMetrics
SetFocus
UnhookWindowsHookEx
GetWindowLongPtrW
SetWindowLongPtrW
GetClientRect
GetDlgItem
GetKeyState
GetSystemMenu
DestroyWindow
GetSysColor
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
wsprintfA
GetClassNameA
GetWindowLongW
GetMenu
GetWindowDC
ReleaseDC
CopyImage
GetParent
ScreenToClient
CreateWindowExW
GetDesktopWindow
GetWindowRect
SetWindowPos
SetTimer
GetMessageW
CreateWindowExA
KillTimer
CharUpperW
SendMessageW
DispatchMessageW
ShowWindow
BringWindowToTop
wsprintfW
MessageBoxW
wvsprintfW
MessageBoxA
EndDialog
ole32
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
VariantClear
SysAllocStringLen
OleLoadPicture
SysAllocString
kernel32
GetFileInformationByHandle
WaitForMultipleObjects
VirtualAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
VirtualFree
SetEndOfFile
SetFileTime
ReadFile
SetFilePointer
GetFileSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FormatMessageW
lstrcpyW
LocalFree
IsBadReadPtr
SuspendThread
TerminateThread
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
GetVersionExW
GetModuleFileNameW
GetCurrentProcess
SetProcessWorkingSetSize
SetEnvironmentVariableW
GetDriveTypeW
CreateFileW
LoadLibraryA
SetThreadLocale
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CompareFileTime
WideCharToMultiByte
GetTempPathW
GetCurrentDirectoryW
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
lstrcmpiW
GetLocaleInfoW
MultiByteToWideChar
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetSystemDefaultLCID
lstrcmpiA
GlobalAlloc
GlobalFree
MulDiv
FindResourceExA
SizeofResource
LoadResource
LockResource
GetProcAddress
GetModuleHandleW
GetStdHandle
WriteFile
lstrlenA
CreateDirectoryW
GetFileAttributesW
lstrlenW
GetLocalTime
SystemTimeToFileTime
CreateThread
GetExitCodeThread
Sleep
ExitProcess
lstrcatW
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetQueuedCompletionStatus
ResumeThread
SetInformationJobObject
CreateIoCompletionPort
AssignProcessToJobObject
CreateJobObjectW
GetLastError
CreateProcessW
GetStartupInfoW
GetCommandLineW
SetLastError
GetDiskFreeSpaceExW
SetFileAttributesW
GetCurrentProcessId
msvcrt
__CxxFrameHandler
??3@YAXPEAX@Z
memset
_wtol
_purecall
memcmp
??2@YAPEAX_K@Z
_wcsnicmp
memmove
memcpy
strncpy
wcsncpy
wcsncmp
strncmp
?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z
_beginthreadex
wcscmp
_CxxThrowException
wcsstr
free
malloc
__C_specific_handler
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
__getmainargs
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
Name
.text
Size
122KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
2/support/keyfiles/CustomHook/win/RunOnce.cmd
- SHA256 535f061c08f1fe7178dcd170e4adbfd8fa29c33e353e490770bbe17ca13f8d1b
- MD5 a7ec4925c52acc8fdf9641c74183d9d8
- SHA1 73beb6b6484b3252a324aa967e91275d5b79a2fc
- SHA512 17d819700ea76adaae001639dcddd5cdf88a34c44128d46a866ce959a03555aa096acc321232de4dcd0bf42c73af30b13cbfc8ae3e62ebe061cde6c5af665661
- TLSH T18BC0EADA723B896C831ABC9055CA0EA76D375CB363048716A405045DD237A1D4F6B5F1
- MD5 SHA1 SHA512 TLSH
AdobeAfterEffects26AllTrial_maxon.pimx
- SHA256 b15c40c43c60d0213528c56ef0a436c27edb4db9b1bd221a057d00bcb0c4d8da
- MD5 6cd6960c57dc51cae20a8c55ebd2a6bd
- SHA1 155107d5a94ec0b3c361789dbc30e4726111f90a
- SHA512 df8d761a203de7fc7fba0362963cc86db91880381f33fe270274fcadbb61bf3c97d89226fec88c2cf519a16a382aaff48f1b2209222d98aa23e032b715954988
- TLSH T1C321088066F868E3F6C416ACD1F7FF056D946F77350881A8F29E49600F9BD92047B463
- MD5 SHA1 SHA512 TLSH