YouTubeDownloader[.]exe

Resubmissions

27-07-2024 15:08

240727-sht9jayane 3

Sharing

Copy URL

Twitter E-mail

General

Target

YouTubeDownloader.exe
Size

1.3MB
MD5

c982e13c686f02679e3a86402c226c80
SHA1

c86923dd5b49567d14442b90c5a17f168714b936
SHA256

8dab48eb84e1a49746f39d241975f66b6ece65b24dbb7e45a034fe811ba76383
SHA512

1bf313a618191067d1445d3c40b1743cd93f2dc0be62fc01045e9082d6af2a068dd295545f6136859ce9c14ba6d82b1f60c8fbf7d3452209f90dee09750c1334
SSDEEP

24576:hXmcgQUnuHfPXT/PsCBWdAVuXPaHjVWjh+8L7SciI+c9:gcdUnu/P3kuuiHMh7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YouTubeDownloader.exe

Files

YouTubeDownloader.exe
.exe windows:6 windows x64 arch:x64

027b1d9be63cf9cbe667ce2ef3ed227b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

shell32

ShellExecuteW

advapi32

OpenProcessToken

user32

ExitWindowsEx

oleaut32

SysFreeString

ole32

CoInitializeEx

powrprof

SetSuspendState

wintrust

WinVerifyTrust

tag

??1String@TagLib@@UEAA@XZ

qt5webenginewidgets

??1QWebEngineView@@UEAA@XZ

qt5quickwidgets

??1QQuickWidget@@UEAA@XZ

qt5widgets

??1QMenu@@UEAA@XZ

qt5webenginecore

?deleteAllCookies@QWebEngineCookieStore@@QEAAXXZ

qt5quick

??1QQuickView@@UEAA@XZ

qt5multimedia

??1QSound@@UEAA@XZ

qt5winextras

??1QWinTaskbarButton@@UEAA@XZ

qt5gui

??1QPen@@QEAA@XZ

qt5qml

??1QJSValue@@QEAA@XZ

qt5network

??1QSslError@@QEAA@XZ

qt5core

?qrand@@YAHXZ

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memcmp

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

exit

api-ms-win-crt-string-l1-1-0

isspace

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.MPRESS1
Size: 1.2MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

027b1d9be63cf9cbe667ce2ef3ed227b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

user32

oleaut32

ole32

powrprof

wintrust

tag

qt5webenginewidgets

qt5quickwidgets

qt5widgets

qt5webenginecore

qt5quick

qt5multimedia

qt5winextras

qt5gui

qt5qml

qt5network

qt5core

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.MPRESS1 Size: 1.2MB - Virtual size: 3.6MB

.MPRESS2 Size: 5KB - Virtual size: 4KB

.rsrc Size: 57KB - Virtual size: 56KB

.MPRESS1
Size: 1.2MB - Virtual size: 3.6MB

.MPRESS2
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 57KB - Virtual size: 56KB