Vegas.Pro.2026_for_triage.zip
- SHA256 4344a76a92303a27685fadafeb1a95d61781dd47c76193c028d0fab4f0bdc10a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vegas.Pro.2026.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vegas.Pro.2026.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Vegas.Pro.2026_for_triage.zip
- Size 3.0MB
- Sample260922-3t3edsthpc
- SHA256 4344a76a92303a27685fadafeb1a95d61781dd47c76193c028d0fab4f0bdc10a
- MD5 6cb5fc88c7af5475fd28a3329ef29481
- SHA1 5deb038fa495c922cbf97ed921d68ed7863bb78b
- SHA512 370e86bee1bd97f50771c72d527124ab34be2ee9132b49f81dd53b80db223aab6805bd7a24fe987c4d3304a7007b2492a0b8d170a36a56305049692ee9d4c94f
- SSDEEP 49152:ekOaczfUJTTKWYqyyxnI7Lhm1SoDTqjq0HP97XoVppZm+om385jc:Z2zOfKDqyiAk1SSqjHvGVp6+ommc
- TLSH T150E5335CAF2DE954F22A1833BDA63569CB1C882BD1CF9D881E65C685BC0B05EF74344B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Vegas.Pro.2026.exe
File Explorer
-
Vegas.Pro.2026_for_triage.zip.zip 3.0MB
-
Vegas.Pro.2026.exe.exe 821.9MB
Vegas.Pro.2026.exe
- IMPHASH 4f2f006e2ecf7172ad368f8289dc96c1
- SHA256 e6fc65b9e7b1d505834c895fbfaf20a7f3a66120b919131f548df02ce98ca3e8
- MD5 5796c25472f3f30b3a898c7093a5fe56
- SHA1 45b29e9ad26ea266756a347fd1d0f343f872e008
- SHA512 69fa28451aa7db6a065029ac8ae7a498f819729cab36f883d6e36fe9466bf76df9925a7a9ca8ad488c0ffb1827c172a49fedcf65baa85450095141fe1ba5fa61
- SSDEEP 49152:ZdJh93Wy6dZxaO3NOYa4hXRdtuXzB/fAiW2YKXbFLw4T45VrF0D1WLpPJZLojdV7:7DkvaKlrayZ0Vz1JWisU7CjzXNMIhfY
- TLSH T1A5995B037D9544B5C09A9634C57A9263B734BC4D8B3137E73E90AB742F76BD0AAB8B04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
54:58:cb:a8:e4:26:99:a3:b1:e8:64:d2:92:c2:ef:fa:3a:46:a5:4b:17:1e:bb:b2:06:fb:58:94:2a:8d:e5:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Prime Fabric Holdings,O=Prime Fabric Holdings,C=US
Chains
Sep 21, 2026
CN=Prime Fabric Holdings,O=Prime Fabric Holdings,C=US
Subject
CN=Prime Fabric Holdings,O=Prime Fabric Holdings,C=US
Serial Number
b7:19:62:93:fd:dd:b0:90:9b:bb:1d:70:d4:f6:2d:00
Issuer
CN=Prime Fabric Holdings,O=Prime Fabric Holdings,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 14, 2026 - Sep 21, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
416800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
77KB
Virtual Size
434KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ