Resubmissions

10/04/2024, 11:46

240410-nxkleshf51 5

10/04/2024, 11:39

240410-nssfgaec43 4

General

  • Target

    capcut_capcutpc_mobile_diversion_1.2.6_installer.exe

  • Size

    2.2MB

  • MD5

    cb5525f961de974072a766961e1e441a

  • SHA1

    1244a1b494f7ff97a608f0656aac298f7f9d5c64

  • SHA256

    33f8122c1a2c3d5e801ab2f655f3150e378501d2f604543b2e198977b7debc47

  • SHA512

    c31c9ff32f43d20872dde8b499ffda63aab4fa1db15bc4442cb1888c39556e7904c247b8d6179385ad4d80e04867396bed609ae585748e12c5c594bf923ef00a

  • SSDEEP

    49152:fQKq6wrr98ArcTTuVMZCC8GYCNbFLg3dlXI5x8oaigMv3DN:fQLprJ8ArnVMZCUPFcNlXID8enp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • capcut_capcutpc_mobile_diversion_1.2.6_installer.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/deviceregister_shared.dll
    .dll windows:6 windows x86 arch:x86

    1e6a3d25a72a349b70871cd4c9daa00a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll windows:5 windows x86 arch:x86

    3034ae11f14c0b033682e13f7f82ac6b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res.zip
    .zip
  • app_warning_icon.png
    .png
  • banner_bk.jpg
    .jpg
  • btn_dark_1_disable.png
    .png
  • btn_dark_1_hover.png
    .png
  • btn_dark_1_normal.png
    .png
  • btn_dark_1_pushed.png
    .png
  • btn_dir_disable.png
    .png
  • btn_dir_hover.png
    .png
  • btn_dir_normal.png
    .png
  • btn_dir_pushed.png
    .png
  • btn_light_1_disable.png
    .png
  • btn_light_1_hover.png
    .png
  • btn_light_1_normal.png
    .png
  • btn_light_1_pushed.png
    .png
  • ckb_1_off.png
    .png
  • ckb_1_on.png
    .png
  • i18n.json
  • ic_close.png
    .png
  • ic_close_disabled.png
    .png
  • ic_close_hover.png
    .png
  • ic_close_pushed.png
    .png
  • ic_min.png
    .png
  • ic_min_disabled.png
    .png
  • ic_min_hover.png
    .png
  • ic_min_pushed.png
    .png
  • lang/cs-CZ.json
  • lang/de-DE.json
  • lang/el-GR.json
  • lang/en-US.json
  • lang/es-LA.json
  • lang/fi-FI.json
  • lang/fil-PH.json
  • lang/fr-FR.json
  • lang/hu-HU.json
  • lang/id-ID.json
  • lang/it-IT.json
  • lang/ja-JP.json
  • lang/ko-KR.json
  • lang/ms-MY.json
  • lang/nl-NL.json
  • lang/pl-PL.json
  • lang/pt-BR.json
  • lang/ro-RO.json
  • lang/ru-RU.json
  • lang/sv-SE.json
  • lang/th-TH.json
  • lang/tr-TR.json
  • lang/vi-VN.json
  • lang/zh-CN.json
  • lang/zh-TW.json
  • resource/install.xml
  • resource/message_box.xml
    .xml
  • resource/select_lang_msgbox.xml
    .xml
  • resource/uninstall.xml
    .xml
  • scroll_bar.png
    .png
  • scrollitem_hot.png
    .png
  • scrollitem_select.png
    .png
  • slider_back.png
    .png
  • slider_fore.png
    .png
  • slider_fore_old.png
    .png
  • textshow1.png
    .png
  • textshow2.png
    .png
  • textshow3.png
    .png
  • $PLUGINSDIR/shell_downloader.dll
    .dll windows:5 windows x86 arch:x86

    742088d9c179cfb6a54c532c52c6f4a5


    Headers

    Imports

    Exports

    Sections