Static task
static1
Behavioral task
behavioral1
Sample
WeVideo_SettupX32iX64.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
WeVideo_SettupX32iX64.exe
Resource
win10v2004-20220812-en
General
-
Target
WeVideo_SettupX32iX64.exe
-
Size
726.2MB
-
MD5
9defcd5f1278de777a66d9aadcd11e7d
-
SHA1
8ce260f197592a8dd1eb93083c87a4da28bf494d
-
SHA256
44f516b26b59bc425d90eddff49d29ddfc596f3c70156a7e38f0c1578ceb6a6b
-
SHA512
6d126d4404bb95aab4347279e7f53a20d4dc6a1d741b9d2f6d406dda569b128ed909a18bab0fee7144e2350d5ceb483b907dc25fdbf263427baff6d7e98aab00
-
SSDEEP
98304:XU3WTpmgvQwbfCTt2c2YgweosAJtYffQLeqjXyUV0wI08IsAVa1fHN8YpJOYaX:Dm65fmfgwMOtYfYbXyUkeV4t8hX
Malware Config
Signatures
Files
-
WeVideo_SettupX32iX64.exe.exe windows x86
c890dcfacdff6743bacb25ad2aaae107
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsDialogMessageW
CharUpperBuffW
gdi32
CreatePen
ole32
CoUninitialize
shell32
DragAcceptFiles
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
winmm
timeGetTime
winspool.drv
ClosePrinter
Sections
.text Size: - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecL Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e>N Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4rU Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ