Static task
static1
Behavioral task
behavioral1
Sample
4K Video Downloader 4.19.3.4700 Multilingual x64/4kvideodownloader_4.19.3_x64.msi
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4K Video Downloader 4.19.3.4700 Multilingual x64/4kvideodownloader_4.19.3_x64.msi
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
(32-Bit) Patch.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
(32-Bit) Patch.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
(64-Bit) Patch.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
(64-Bit) Patch.exe
Resource
win10v2004-20220812-en
General
-
Target
4K Video Downloader 4.19.3.4700 Multilingual x64.zip
-
Size
89.6MB
-
MD5
c57a32f1c9074d7b564825ef6d7f035e
-
SHA1
1b668990d61246aa6241779040568c35ca3794c2
-
SHA256
61e8c69784738c90d0d00357383097ae806410a7bd691e7adfe81755f7c7c45b
-
SHA512
d5a039cc70de44e1fd20e1873b3f15b2cbe7e0022f0025e96ed81a005b214c07b9128be28a08cd143c2aaa742f820acd967718180ff5834cc86a310d9ed02ccb
-
SSDEEP
1572864:dLIyiXkAZSfophjivZAu+l0bWDDrQ9z8pb9CmYwiOzH713:dLIjXkAZSw/Ov7+lfDrQ9cYmYwvp
Malware Config
Signatures
Files
-
4K Video Downloader 4.19.3.4700 Multilingual x64.zip.zip
Password: 123
-
4K Video Downloader 4.19.3.4700 Multilingual x64/4kvideodownloader_4.19.3_x64.msi.msi
-
4K Video Downloader 4.19.3.4700 Multilingual x64/Patch.zip.zip
Password: 123
-
(32-Bit) Patch.exe.exe windows x86
Password: 123
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
(64-Bit) Patch.exe.exe windows x86
Password: 123
dc73a9bd8de0fd640549c85ac4089b87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Sections
.text Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ