Resubmissions

22/08/2024, 14:53

240822-r9gxvavhpn3

22/08/2024, 14:49

240822-r631xasfrh5

22/08/2024, 14:35

240822-ryadmasckd9

General

  • Target
    capcut_capcutpc_invitefission_1.2.4_installer (1).exe
  • Size 2.2MB
  • Sample240822-ryadmasckd
  • SHA256 aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • capcut_capcutpc_invitefission_1.2.4_installer (1).exe
    .exe 2.2MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/deviceregister_shared.dll
    .dll 226KB
  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll 1.2MB
  • $PLUGINSDIR/res.zip
    .zip 160KB
  • app_warning_icon.png
    .png 10KB
  • banner_bk.jpg
    .jpg 83KB
  • btn_dark_1_disable.png
    .png 495B
  • btn_dark_1_hover.png
    .png 500B
  • btn_dark_1_normal.png
    .png 465B
  • btn_dark_1_pushed.png
    .png 455B
  • btn_dir_disable.png
    .png 634B
  • btn_dir_hover.png
    .png 1KB
  • btn_dir_normal.png
    .png 599B
  • btn_dir_pushed.png
    .png 577B
  • btn_light_1_disable.png
    .png 492B
  • btn_light_1_hover.png
    .png 494B
  • btn_light_1_normal.png
    .png 455B
  • btn_light_1_pushed.png
    .png 480B
  • ckb_1_off.png
    .png 358B
  • ckb_1_on.png
    .png 530B
  • i18n.json
    1KB
  • ic_close.png
    .png 348B
  • ic_close_disabled.png
    .png 348B
  • ic_close_hover.png
    .png 348B
  • ic_close_pushed.png
    .png 348B
  • ic_min.png
    .png 154B
  • ic_min_disabled.png
    .png 154B
  • ic_min_hover.png
    .png 154B
  • ic_min_pushed.png
    .png 154B
  • lang/cs-CZ.json
    2KB
  • lang/de-DE.json
    2KB
  • lang/el-GR.json
    2KB
  • lang/en-US.json
    2KB
  • lang/es-LA.json
    2KB
  • lang/fi-FI.json
    2KB
  • lang/fil-PH.json
    2KB
  • lang/fr-FR.json
    2KB
  • lang/hu-HU.json
    2KB
  • lang/id-ID.json
    2KB
  • lang/it-IT.json
    2KB
  • lang/ja-JP.json
    2KB
  • lang/ko-KR.json
    2KB
  • lang/ms-MY.json
    2KB
  • lang/nl-NL.json
    2KB
  • lang/pl-PL.json
    2KB
  • lang/pt-BR.json
    2KB
  • lang/ro-RO.json
    2KB
  • lang/ru-RU.json
    2KB
  • lang/sv-SE.json
    2KB
  • lang/th-TH.json
    2KB
  • lang/tr-TR.json
    2KB
  • lang/vi-VN.json
    2KB
  • lang/zh-CN.json
    2KB
  • lang/zh-TW.json
    2KB
  • resource/install.xml
    6KB
  • resource/message_box.xml
    .xml 7KB
  • resource/select_lang_msgbox.xml
    .xml 7KB
  • resource/uninstall.xml
    .xml 3KB
  • scroll_bar.png
    .png 267B
  • scrollitem_hot.png
    .png 612B
  • scrollitem_select.png
    .png 883B
  • slider_back.png
    .png 478B
  • slider_fore.png
    .png 294B
  • slider_fore_old.png
    .png 437B
  • textshow1.png
    .png 6KB
  • textshow2.png
    .png 8KB
  • textshow3.png
    .png 8KB
  • $PLUGINSDIR/shell_downloader.dll
    .dll 2.2MB

capcut_capcutpc_invitefission_1.2.4_installer (1).exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 aa8ff4d4c4505f9245ae995be2fee8f6a78b1167126e613490e1c22549bdf142
  • MD5 SHA1 SHA512 SSDEEP
Digest
9f:5d:44:fd:29:6c:6f:a4:10:dd:e6:44:76:71:10:21:5c:d5:7f:7c:66:02:55:c8:b7:3e:5f:31:c6:74:9c:a0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths