Cinema 4D[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Cinema 4D.exe
Size 12.5MB
Sample260724-k4d6fawsav
SHA256 22948e48517fee00626d024a7e87cba45c2baf946898223b5d76e18a94e5f298
MD5 c891c6efe1591235a94d891f63d75bca
SHA1 b5b91100074de8137abe5f0a591eb1443619caf1
SHA512 468560696bd348c72d2c1ee742e4daeb65a322a9100f599b474881e8eabcc92626e88ac65e19ba13f266485b4aa7914943f871a9f8bbf08ea50b4437f3ea087d
SSDEEP 393216:/ui6Kt1VmoEagW4cilA2UrN19uR1tXvgT5meJc0/X9xZLiHU4a:/ui6c3Ys8QN/uXNCmenhLi0r
TLSH
T176D6334BB76580F6D19B983DC8858E41E2B23CA95B04634F5351BBBB8F336D1BD2A710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cinema 4D.exe

File Explorer

Cinema 4D.exe

.exe 12.5MB

Cinema 4D.exe

IMPHASH d3bbfd624fcfeb095c7bf0242b723cee
SHA256 22948e48517fee00626d024a7e87cba45c2baf946898223b5d76e18a94e5f298
MD5 c891c6efe1591235a94d891f63d75bca
SHA1 b5b91100074de8137abe5f0a591eb1443619caf1
SHA512 468560696bd348c72d2c1ee742e4daeb65a322a9100f599b474881e8eabcc92626e88ac65e19ba13f266485b4aa7914943f871a9f8bbf08ea50b4437f3ea087d
SSDEEP 393216:/ui6Kt1VmoEagW4cilA2UrN19uR1tXvgT5meJc0/X9xZLiHU4a:/ui6c3Ys8QN/uXNCmenhLi0r
TLSH
T176D6334BB76580F6D19B983DC8858E41E2B23CA95B04634F5351BBBB8F336D1BD2A710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

127052

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord17

shell32

ShellExecuteW SHBrowseForFolderW ShellExecuteExW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderPathW SHGetMalloc

gdi32

CreateCompatibleDC CreateFontIndirectW DeleteObject DeleteDC GetCurrentObject StretchBlt GetDeviceCaps CreateCompatibleBitmap SelectObject SetStretchBltMode GetObjectW

advapi32

FreeSid AllocateAndInitializeSid CheckTokenMembership

user32

EnableMenuItem IsWindow EnableWindow MessageBeep LoadIconW LoadImageW SetWindowsHookExW PtInRect CallNextHookEx DefWindowProcW CallWindowProcW DrawIconEx DialogBoxIndirectParamW GetWindow ClientToScreen GetDC DrawTextW SystemParametersInfoW GetSystemMetrics SetFocus UnhookWindowsHookEx GetWindowLongPtrW SetWindowLongPtrW GetClientRect GetDlgItem GetKeyState GetSystemMenu DestroyWindow GetSysColor SetWindowTextW GetWindowTextLengthW GetWindowTextW wsprintfA GetClassNameA GetWindowLongW GetMenu GetWindowDC ReleaseDC CopyImage GetParent ScreenToClient CreateWindowExW GetDesktopWindow GetWindowRect SetWindowPos SetTimer GetMessageW CreateWindowExA KillTimer CharUpperW SendMessageW DispatchMessageW ShowWindow BringWindowToTop wsprintfW MessageBoxW wvsprintfW MessageBoxA EndDialog

ole32

CreateStreamOnHGlobal CoInitialize CoCreateInstance

oleaut32

SysFreeString VariantClear SysAllocStringLen OleLoadPicture SysAllocString

kernel32

GetFileInformationByHandle WaitForMultipleObjects VirtualAlloc SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount VirtualFree SetEndOfFile SetFileTime ReadFile SetFilePointer GetFileSize LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FormatMessageW lstrcpyW LocalFree IsBadReadPtr SuspendThread TerminateThread GetSystemDirectoryW GetCurrentThreadId InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetModuleFileNameW GetCurrentProcess SetProcessWorkingSetSize SetEnvironmentVariableW GetDriveTypeW CreateFileW LoadLibraryA SetThreadLocale GetSystemTimeAsFileTime ExpandEnvironmentStringsW CompareFileTime WideCharToMultiByte GetTempPathW GetCurrentDirectoryW FindFirstFileW lstrcmpW DeleteFileW FindNextFileW FindClose RemoveDirectoryW SetCurrentDirectoryW GetEnvironmentVariableW lstrcmpiW GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource GetProcAddress GetModuleHandleW GetStdHandle WriteFile lstrlenA CreateDirectoryW GetFileAttributesW lstrlenW GetLocalTime SystemTimeToFileTime CreateThread GetExitCodeThread Sleep ExitProcess lstrcatW AddVectoredExceptionHandler RemoveVectoredExceptionHandler CloseHandle WaitForSingleObject GetExitCodeProcess GetQueuedCompletionStatus ResumeThread SetInformationJobObject CreateIoCompletionPort AssignProcessToJobObject CreateJobObjectW GetLastError CreateProcessW GetStartupInfoW GetCommandLineW SetLastError GetDiskFreeSpaceExW SetFileAttributesW GetCurrentProcessId

msvcrt

__CxxFrameHandler ??3@YAXPEAX@Z memset _wtol _purecall memcmp ??2@YAPEAX_K@Z _wcsnicmp memmove memcpy strncpy wcsncpy wcsncmp strncmp ?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z _beginthreadex wcscmp _CxxThrowException wcsstr free malloc __C_specific_handler _unlock __dllonexit _lock _onexit ??1type_info@@UEAA@XZ __getmainargs _XcptFilter _exit _ismbblead _cexit exit _acmdln _initterm _amsg_exit __setusermatherr _commode _fmode __set_app_type ?terminate@@YAXXZ