Resubmissions

26-08-2024 11:24

240826-nh2ama1bqa 3

26-08-2024 11:20

240826-nfx57a1aqh 6

General

  • Target

    capcitziparchaaaa.zip

  • Size

    2.0MB

  • MD5

    7941bf46b736e99a9eaedfab8f2c1691

  • SHA1

    e8136dd19698306f9fdd61072615c35cfff191f8

  • SHA256

    6c9513d36b96aa9b994cb314748a788a15d9cca9fc6e46d0456364d5287550d7

  • SHA512

    2519eb80fce27a90cadb46c0484076d450e06caddb5cac4f8787b6cb7a937ea92d9f6545f4ddd108925a6951a495434321014d7f13a0ef71ead0bdd77c97cc2b

  • SSDEEP

    49152:5Ygyq+cSLgqku0d0zP4MkY9973C3d9X6TRAaa8V9QStSf:+gprY2u0d0zPtZ7yN9X6dAyif

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • capcitziparchaaaa.zip
    .zip
  • CapCut_7367364674536357904_installer.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/deviceregister_shared.dll
    .dll windows:6 windows x86 arch:x86

    1e6a3d25a72a349b70871cd4c9daa00a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll windows:5 windows x86 arch:x86

    3034ae11f14c0b033682e13f7f82ac6b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/res.zip
    .zip
  • app_warning_icon.png
    .png
  • banner_bk.jpg
    .jpg
  • btn_dark_1_disable.png
    .png
  • btn_dark_1_hover.png
    .png
  • btn_dark_1_normal.png
    .png
  • btn_dark_1_pushed.png
    .png
  • btn_dir_disable.png
    .png
  • btn_dir_hover.png
    .png
  • btn_dir_normal.png
    .png
  • btn_dir_pushed.png
    .png
  • btn_light_1_disable.png
    .png
  • btn_light_1_hover.png
    .png
  • btn_light_1_normal.png
    .png
  • btn_light_1_pushed.png
    .png
  • ckb_1_off.png
    .png
  • ckb_1_on.png
    .png
  • i18n.json
  • ic_close.png
    .png
  • ic_close_disabled.png
    .png
  • ic_close_hover.png
    .png
  • ic_close_pushed.png
    .png
  • ic_min.png
    .png
  • ic_min_disabled.png
    .png
  • ic_min_hover.png
    .png
  • ic_min_pushed.png
    .png
  • lang/cs-CZ.json
  • lang/de-DE.json
  • lang/el-GR.json
  • lang/en-US.json
  • lang/es-LA.json
  • lang/fi-FI.json
  • lang/fil-PH.json
  • lang/fr-FR.json
  • lang/hu-HU.json
  • lang/id-ID.json
  • lang/it-IT.json
  • lang/ja-JP.json
  • lang/ko-KR.json
  • lang/ms-MY.json
  • lang/nl-NL.json
  • lang/pl-PL.json
  • lang/pt-BR.json
  • lang/ro-RO.json
  • lang/ru-RU.json
  • lang/sv-SE.json
  • lang/th-TH.json
  • lang/tr-TR.json
  • lang/vi-VN.json
  • lang/zh-CN.json
  • lang/zh-TW.json
  • resource/install.xml
  • resource/message_box.xml
    .xml
  • resource/select_lang_msgbox.xml
    .xml
  • resource/uninstall.xml
    .xml
  • scroll_bar.png
    .png
  • scrollitem_hot.png
    .png
  • scrollitem_select.png
    .png
  • slider_back.png
    .png
  • slider_fore.png
    .png
  • slider_fore_old.png
    .png
  • textshow1.png
    .png
  • textshow2.png
    .png
  • textshow3.png
    .png
  • $PLUGINSDIR/shell_downloader.dll
    .dll windows:5 windows x86 arch:x86

    742088d9c179cfb6a54c532c52c6f4a5


    Headers

    Imports

    Exports

    Sections