Install Resolve 20[.]3[.]1[.]exe

Resubmissions

27/07/2026, 05:25

260727-f4gt4swtft

27/07/2026, 05:24

260727-f3v1cahm2v1

Sharing

Copy URL Twitter E-mail

General

Target
Install Resolve 20.3.1.exe
Size 2.2MB
Sample260727-f4gt4swtft
SHA256 7274286e2e86aea7dc2adb494e5426b9d24f86e9cf543cdf9d2e363b15f27ad9
MD5 fb3bd17d8bd36d32b2ae0ccec9abd6f5
SHA1 bd8790f817240a1402d451598260084711389433
SHA512 03da52dbb1fca1dfbd91db607ec352eb79194912fdd14e960a87b45c345ca5ffb4af37611915e0c04a308036e4c58a12a04ce48e0f76bd65b5500e16132a53ab
SSDEEP 49152:HGtlqD2VwASOPxIU6i+eYHnwc3bB5u3Qu2LRqXrxLBqCBudPLlwP7:oG++eYHnbNR+LBqKuFlwP7
TLSH
T1CFB5AE56E3A804F4E9F6C138C856413BEBF1B45A23B09BDB06A4C6650F13BE16E3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Install Resolve 20.3.1.exe

.exe 2.2MB

Install Resolve 20.3.1.exe

IMPHASH f4a4792d62f654b54486ae404c2121ea
SHA256 7274286e2e86aea7dc2adb494e5426b9d24f86e9cf543cdf9d2e363b15f27ad9
MD5 fb3bd17d8bd36d32b2ae0ccec9abd6f5
SHA1 bd8790f817240a1402d451598260084711389433
SHA512 03da52dbb1fca1dfbd91db607ec352eb79194912fdd14e960a87b45c345ca5ffb4af37611915e0c04a308036e4c58a12a04ce48e0f76bd65b5500e16132a53ab
SSDEEP 49152:HGtlqD2VwASOPxIU6i+eYHnwc3bB5u3Qu2LRqXrxLBqCBudPLlwP7:oG++eYHnbNR+LBqKuFlwP7
TLSH
T1CFB5AE56E3A804F4E9F6C138C856413BEBF1B45A23B09BDB06A4C6650F13BE16E3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

bd:0b:db:a6:90:c3:b0:5d:a0:75:15:6f:1d:c1:5e:ec:dd:f5:8a:77:c5:cd:eb:8a:96:86:2d:0c:c3:94:59:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=098 098 287,CN=Blackmagic Design Pty Ltd.,OU=Blackmagic Design,O=Blackmagic Design Pty Ltd.,L=Port Melbourne,ST=Victoria,C=AU,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024155

Chains

Dec 17, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

08:5d:b9:17:cb:ec:1b:a9:51:c7:85:50:42:b9:08:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 14, 2024 - Nov 21, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

1456868

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

SysAllocStringLen VariantClear SysStringLen

user32

SetForegroundWindow AllowSetForegroundWindow MessageBoxW EnumWindows GetWindowThreadProcessId GetProcessWindowStation DestroyWindow ShowWindow EndDialog SetWindowTextW CharUpperW LoadStringW DialogBoxParamW GetDlgItem SetActiveWindow PostMessageW LoadIconW KillTimer SetTimer SendMessageW SetWindowLongPtrW GetWindowLongPtrW GetUserObjectInformationW

shell32

ShellExecuteExW

crypt32

CertFreeCertificateContext CertDuplicateCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertGetCertificateContextProperty

ws2_32

WSACleanup WSAGetLastError recv WSASetLastError closesocket send

bcrypt

BCryptGenRandom

kernel32

LCMapStringW CompareStringW FlsFree FlsGetValue FlsAlloc HeapAlloc HeapReAlloc HeapFree FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetConsoleOutputCP GetFileSizeEx SetFilePointerEx FlushFileBuffers SetStdHandle GetFullPathNameW FlsSetValue PeekNamedPipe GetDriveTypeW SetConsoleCtrlHandler ExitProcess FreeLibraryAndExitThread ExitThread CreateThread EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetCommandLineW CloseHandle GetLastError WaitForSingleObject CreateProcessW GetProcessId EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar WideCharToMultiByte FreeLibrary GetModuleFileNameW LoadLibraryExW LoadLibraryW GetStringTypeW FormatMessageW SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW CreateFileW DeleteFileW RemoveDirectoryW SetFileAttributesW SetFileTime GetTempPathW SetLastError GetCurrentProcessId GetCurrentThreadId GetTickCount GetSystemDirectoryW GetModuleHandleW GetProcAddress FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetModuleHandleA GetFileSize ReadFile SetEndOfFile SetFilePointer WriteFile GlobalMemoryStatusEx GetSystemInfo GetProcessAffinityMask GetStdHandle GetFileInformationByHandle WaitForMultipleObjects Sleep VirtualAlloc VirtualFree GetVersionExW lstrcatW lstrlenW InitializeCriticalSection SetEvent ResetEvent CreateEventW GetEnvironmentVariableW GetFileType InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW RtlVirtualUnwind DeleteFiber QueryPerformanceCounter GetSystemTimeAsFileTime ConvertFiberToThread LoadLibraryA GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetProcessHeap GetTimeZoneInformation HeapSize WriteConsoleW LocalFree GetCurrentProcess

advapi32

ReportEventW DeregisterEventSource CryptAcquireContextW CryptReleaseContext CryptDestroyKey RegisterEventSourceW CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptCreateHash CryptDestroyHash CryptSignHashW CryptEnumProvidersW

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Install Resolve 20.3.1.exe

oleaut32

user32

shell32

crypt32

ws2_32

bcrypt

kernel32

advapi32

generic