Topaz Gigapixel Pro v1.3.4 - Win - Keyflame.7z
- SHA256 97d8a9f8f2b618c0d230cd00ef477f0039141a9dff5362c9273c268305ac73d8
Password
flame
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Crack/dxgi.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Crack/dxgi.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Crack/version.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Crack/version.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Setup/TopazGigapixel-1.3.4.msi
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral6
Sample
Setup/TopazGigapixel-1.3.4.msi
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
17 signatures
150 seconds
General
- Target Topaz Gigapixel Pro v1.3.4 - Win - Keyflame.7z
- Size 402.4MB
- Sample261001-p5f4msvgmg
- SHA256 97d8a9f8f2b618c0d230cd00ef477f0039141a9dff5362c9273c268305ac73d8
- MD5 427d4a08450da78e5e84f182ac7673c1
- SHA1 f90399305bd3153c4f5daa08227e1b84bd62bed8
- SHA512 b28d9340c94cbd4f78329b8af851e57d6e26b4351fb2b71fd75221bdb7d7fd060e11d1add567921cba10f6d662303931571a6665eaa15c3b40cee198817dd442
- SSDEEP 6291456:udw+PGb3IFIzryjoF0HUDhvh8wR4Rs4YehXcxMXw4JdqVg702qfUynryrZ1/KCk:u+cCzu2bDL8wR4RsedcAwiI2SnOrTKd
- TLSH T1981933F333E74A354D6BAB89DCA89839C8CB3136539E425571BB11EC7445A2F0390A7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crack/dxgi.dll unpack001/Crack/version.dll
File Explorer
-
Topaz Gigapixel Pro v1.3.4 - Win - Keyflame.7z.7z 402.4MB
-
Crack/dxgi.dll.dll 40KB
-
Crack/version.dll.dll 40KB
-
How to Install.txt825B
-
Setup/TopazGigapixel-1.3.4.msi.msi 412.5MB
-
keyfla.me.url.url 178B
Crack/dxgi.dll
- IMPHASH 0efd52e4592f023e0f5172ece1eaf0d7
- SHA256 27e634d9562e6d585e2b5f60d18565742f1a703f009df961a5aec90bc46e0aa2
- MD5 7e85ad5e20f083eac7a2f40ba8651563
- SHA1 4cf2dbe110408e8e3a677486cdb3c72e0e9537b4
- SHA512 dc3585835f4a43d38277241fda140cb143be6e7026f6cad133b1dd19316167016b5aa10e1a1e9afafe8f0e7b2c6c32eaf6c0565099923464d61c63a230a7b35e
- SSDEEP 768:n8lqU9OiUeDqELgzmdFkByQdIzEnrEnpmJH:n6qUoiUgoyvzCEpuH
- TLSH T13913F7057AE912F5E9FBF734C9746136E672B8499930D30E0A50C6391F32713AA2DF26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
flame
Minor OS version
2
Major OS version
5
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalAlloc
LocalFree
FlushInstructionCache
VirtualQuery
VirtualProtectEx
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
GetCurrentProcessId
ExitProcess
GetLastError
SetLastError
WriteProcessMemory
LoadResource
WriteFile
CloseHandle
FormatMessageW
lstrcatW
lstrlenA
lstrlenW
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
GetEnvironmentVariableW
OutputDebugStringW
FindResourceExW
GetSystemDirectoryW
GetVersion
CreateActCtxW
WideCharToMultiByte
CompareStringA
GetTimeFormatW
GetDateFormatW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
VirtualAlloc
VirtualFree
GetSystemInfo
VirtualProtect
HeapCreate
HeapDestroy
GetCurrentThreadId
GetThreadId
OpenThread
GetThreadContext
SetThreadContext
SuspendThread
ResumeThread
ReleaseMutex
WaitForSingleObject
CreateMutexW
Thread32First
Thread32Next
GetSystemTime
FormatMessageA
lstrcmpiW
GetFileAttributesW
GetProcAddress
DisableThreadLibraryCalls
CreateFileW
LockResource
shell32
SHGetFolderPathW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ApplyCompatResolutionQuirking
CompatString
CompatValue
CreateDXGIFactory
CreateDXGIFactory1
CreateDXGIFactory2
DXGID3D10CreateDevice
DXGID3D10CreateLayeredDevice
DXGID3D10GetLayeredDeviceSize
DXGID3D10RegisterLayers
DXGIDeclareAdapterRemovalSupport
DXGIDisableVBlankVirtualization
DXGIDumpJournal
DXGIGetDebugInterface1
DXGIReportAdapterConfiguration
PIXBeginCapture
PIXEndCapture
PIXGetCaptureState
SetAppCompatStringPointer
UpdateHMDEmulationStatus
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=68, id=1, productName=Unmarked objects,
count=6, id=260, version=27054,
count=1, id=256, version=27054,
count=1, id=255, version=27054,
count=1, id=258, version=27054,
Crack/version.dll
- IMPHASH 0efd52e4592f023e0f5172ece1eaf0d7
- SHA256 1799892fb423a7c402dcebd458fb11cca074b95f532c87324b442bfc51675cba
- MD5 16ba04b31b6df25e8be0e59ca705ff0c
- SHA1 92b3034afce4b1d163d85e4b091fafc1d1c0dfff
- SHA512 92d67727ce243717127e91cfc31431582a113a8da532af7ac2b2d317b3e3ab93a890bcd78b9dfa8e16a2118cd1e4aa0867299a32af760008961826db72adf88c
- SSDEEP 768:MlqU9OiUeDq4LgzmdFQByQ/act8TD7E1mckVPxIiT1pmJH:KqUoiUskyAaFjE1mckVPxIiTDuH
- TLSH T11613E7056AE912F8E9FBF734C9756136E672B8499930E30E0650C6391F327139A2DF26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
flame
Minor OS version
2
Major OS version
5
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
LocalAlloc
LocalFree
FlushInstructionCache
VirtualQuery
VirtualProtectEx
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
GetCurrentProcessId
ExitProcess
GetLastError
SetLastError
WriteProcessMemory
LoadResource
WriteFile
CloseHandle
FormatMessageW
lstrcatW
lstrlenA
lstrlenW
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
GetEnvironmentVariableW
OutputDebugStringW
FindResourceExW
GetSystemDirectoryW
GetVersion
CreateActCtxW
WideCharToMultiByte
CompareStringA
GetTimeFormatW
GetDateFormatW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
VirtualAlloc
VirtualFree
GetSystemInfo
VirtualProtect
HeapCreate
HeapDestroy
GetCurrentThreadId
GetThreadId
OpenThread
GetThreadContext
SetThreadContext
SuspendThread
ResumeThread
ReleaseMutex
WaitForSingleObject
CreateMutexW
Thread32First
Thread32Next
GetSystemTime
FormatMessageA
lstrcmpiW
GetFileAttributesW
GetProcAddress
DisableThreadLibraryCalls
CreateFileW
LockResource
shell32
SHGetFolderPathW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
Name
.text
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=68, id=1, productName=Unmarked objects,
count=6, id=260, version=27054,
count=1, id=256, version=27054,
count=1, id=255, version=27054,
count=1, id=258, version=27054,
How to Install.txt
- SHA256 17a42f7ffa36b668b74fda782c8c87dfba2dd925f8cfdeb6772c50c230317462
- MD5 a4b4f3491e20e2e5b55c4504b7686ac9
- SHA1 ca1c86eabb0d22c7914194948e16e8ac3f669baa
- SHA512 48dbbe3b6a30dc7059f913ed49255c7b1cb98801a66d56f7ae32cb9f5ad7238eb947808e6b1664e5416c8c7a13dab535870b378f237a8be4dd2824c35d10a734
- TLSH T1D8014CD82C16A3B1162962FA230EB6EAE75C944ECB7A10E53E9C40EAD7037C54666085
- MD5 SHA1 SHA512 TLSH
Setup/TopazGigapixel-1.3.4.msi
- SHA256 1647c63c82c88297e81565485287325cac5c194a549c47a6f7fa195b03fd9cd4
- MD5 d7719dc8ef0ddc68ec334f3a63390a12
- SHA1 d4138bc2cea1dce6fbb89054dd98b22f5f61363c
- SHA512 f8e1616d4c178bcf21fbd9aa95a65e954049856d7ebd9862b505f1a72a0e0259e7e6f839e479595572563d2526afe516bfaa2cd949e9521218e74b27740709fb
- SSDEEP 12582912:LJZGC6dZSCTvU2N08dhcAIVJwGN0+ubCgn:LJBEZnz/3vhIVJwGO+u2
- TLSH T11B29332B7AD17977FF5AAB368E673B01C63174058F04A9DB11A811352E6BBD4B233342
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7877c4037e6305fc54c1a4a868a2a63693fc2819a49195642f44cff88fb72bd3
Digest Algorithm
sha256
Digest Matches
Trusted
Prehash
Signing Certificate
CN=Topaz Labs LLC,O=Topaz Labs LLC,L=Dallas,ST=Texas,C=US
Chains
Aug 12, 2026
CN=Topaz Labs LLC,O=Topaz Labs LLC,L=Dallas,ST=Texas,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Topaz Labs LLC,O=Topaz Labs LLC,L=Dallas,ST=Texas,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Topaz Labs LLC,O=Topaz Labs LLC,L=Dallas,ST=Texas,C=US
Serial Number
09:af:73:d9:5f:a8:8e:ba:e6:17:c7:f3:ee:f0:1a:e8
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 28, 2025 - Feb 5, 2028
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
keyfla.me.url
- SHA256 a9d0b3a7247d726808cf701c653b58e2cf2c33d233a9dd361f3e0315d99a6890
- MD5 dc595d2cabaf16c08fe5896438d81378
- SHA1 72f93a1629d63f33c32beb13e90b16e97bee22a4
- SHA512 0d6844529864442642ef11521c068c69fee3b5b2ab266d758da583646977497d0a753f7c155a15825e42314bb089ac91f37b0cb04919d406c3755d030ff00395
- TLSH T11EC080BE450AC15DD353901B10B0FD88DC4D78764CE6E44C1745CFC74CD48E4E885576
- MD5 SHA1 SHA512 TLSH