2400930336f6c6f173b238944ca5190e9beded58565d31d342da1cff918202c6N

Sharing

Copy URL

Twitter E-mail

General

Target

2400930336f6c6f173b238944ca5190e9beded58565d31d342da1cff918202c6N
Size

6.1MB
MD5

4936bab45228643c14f628d8d86de420
SHA1

b39b1669b9f1ab96b8b9818d6ec6437fa312f632
SHA256

2400930336f6c6f173b238944ca5190e9beded58565d31d342da1cff918202c6
SHA512

07943f943930e876abb4f5aff4a88ef9bfd36acd321a6650580e79ca1483e477c58b75a73a657ba72317c56fdd293e8d55036cf2082e80af86522a523667777a
SSDEEP

196608:dq136M/8c8/40Vh7km03FLOyomFHKnPq:dy3kw0rwT3Fv

Score

1^/10

Malware Config

Signatures

Files

2400930336f6c6f173b238944ca5190e9beded58565d31d342da1cff918202c6N
.exe windows:6 windows x86 arch:x86

ab6326c860b34288c9ab229a698aee88

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

64:ea:ff:cd:1b:c2:0f:c1:24:5f:10:5d:75:3d:0a:d1
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

16/01/2024, 11:40

Not After

15/01/2025, 11:40

Subject

CN=Open Source Developer\, Chen Lu,O=Open Source Developer,L=Suzhou,ST=Jiangsu,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02/11/2023, 08:32

Not After

30/10/2034, 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:74:85:10:53:4e:0f:35:fc:cd:27:d0:0f:6a:dc:29:8d:0b:67:67:7c:6b:84:96:c0:1b:dd:a7:fd:5d:d9:50
Signer

Actual PE Digest

04:74:85:10:53:4e:0f:35:fc:cd:27:d0:0f:6a:dc:29:8d:0b:67:67:7c:6b:84:96:c0:1b:dd:a7:fd:5d:d9:50

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\WorkDir\YoutubeDownloader\YoutubeMusicDownloader\vc2022_release_plus_dync\YoutubeMusicDownloader.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW

wininet

InternetCloseHandle
InternetOpenUrlW
InternetReadFile
InternetCanonicalizeUrlW
InternetOpenW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetCrackUrlW

msi

ord113

uxtheme

DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
SetWindowTheme
IsAppThemed

kernel32

lstrcpynW
RtlUnwind
GetModuleHandleExW
ExitProcess
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapValidate
GetSystemInfo
GetCommandLineA
GetCommandLineW
HeapQueryInformation
VirtualAlloc
QueryPerformanceFrequency
SetStdHandle
GetFileType
GetStdHandle
WriteConsoleW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetTimeZoneInformation
VirtualQuery
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
SearchPathW
GetWindowsDirectoryW
OutputDebugStringW
ResetEvent
GetTempPathW
FindResourceExW
GetCurrentDirectoryW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
lstrcmpiW
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetProfileIntW
SetErrorMode
InitializeCriticalSectionAndSpinCount
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetAtomNameW
GetCurrentProcessId
CompareStringA
lstrcmpA
GetVersionExW
GetCurrentThread
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateEventW
SetEvent
LocalAlloc
VerifyVersionInfoW
lstrcpyW
FindNextFileW
VirtualProtect
ResumeThread
SetThreadPriority
CompareStringW
GlobalGetAtomNameW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryW
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
CreateFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GetVersionExA
Sleep
InitializeCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
MulDiv
GetProcAddress
GetModuleHandleW
GenerateConsoleCtrlEvent
CopyFileW
GetTickCount
GetStartupInfoW
CreateProcessW
TerminateProcess
WaitForSingleObject
CreatePipe
SetHandleInformation
CloseHandle
ReadFile
GetTempFileNameW
GetFileAttributesExW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetModuleFileNameW
FindFirstFileW
FindClose
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
SetLastError
GetLastError
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
VerSetConditionMask

user32

WindowFromPoint
ClientToScreen
HideCaret
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
GetWindowDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
KillTimer
SetTimer
SetCapture
GetActiveWindow
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsWindowVisible
ShowOwnedPopups
PostThreadMessageW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
EnableWindow
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
SetScrollPos
ScrollWindow
BeginPaint
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
DispatchMessageW
RegisterWindowMessageW
GetMenuCheckMarkDimensions
GetFocus
GetParent
SetRectEmpty
SendDlgItemMessageA
InflateRect
CopyRect
ReleaseDC
GetDC
LoadBitmapW
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateW
GrayStringW
NotifyWinEvent
CreateDialogIndirectParamW
EndDialog
MessageBoxW
PeekMessageW
PostQuitMessage
PostMessageW
UnregisterClassW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
SetMenuItemBitmaps
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
TrackMouseEvent
IsRectEmpty
DrawIconEx
GetIconInfo
GetCursorPos
GetAsyncKeyState
GetKeyNameTextW
MapVirtualKeyW
ReleaseCapture
DestroyIcon
CopyImage
SetLayeredWindowAttributes
SystemParametersInfoW
EnumDisplayMonitors
EnumChildWindows
DrawFrameControl
DrawEdge
GetDesktopWindow
SetParent
GetLastActivePopup
LoadCursorW
GetScrollPos
GetWindowPlacement
IsIconic
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
GetSystemMetrics
GetWindowRect
SetCursor
IntersectRect
OffsetRect
LoadImageW
IsMenu
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
SendMessageW
IsWindow
TabbedTextOutW
MapDialogRect
GetMessageW
TranslateMessage
GetWindowThreadProcessId
MessageBeep
SetCursorPos
CopyIcon
SetRect
CharUpperW
DestroyMenu
RealChildWindowFromPoint
GetClipboardFormatNameA
GetClipboardFormatNameW
UnpackDDElParam
SetClipboardData
EmptyClipboard
SetClassLongW
DestroyAcceleratorTable
UpdateLayeredWindow
UnionRect
MonitorFromPoint
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
CopyAcceleratorTableW
TranslateAcceleratorW
ReuseDDElParam
WaitMessage
DestroyCursor
GetComboBoxInfo
MapVirtualKeyExW
IsCharLowerW
SubtractRect
CharUpperBuffW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GetDoubleClickTime
RegisterClipboardFormatW
EndPaint

gdi32

BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateEllipticRgn
CreateFontIndirectW
CreateHatchBrush
CreatePalette
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetCurrentObject
GetNearestPaletteIndex
GetObjectType
GetPaletteEntries
GetPixel
GetRgnBox
GetTextColor
GetTextExtentPoint32W
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetRgn
PatBlt
PtInRegion
PtVisible
RectVisible
Rectangle
RealizePalette
RoundRect
SetPixelV
SetRectRgn
GetTextMetricsW
TextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceW
SetBkColor
SetTextColor
ExcludeClipRect
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
ExtTextOutW
SetPaletteEntries
CreateDCW
CopyMetaFileW
GetObjectW
CreateDIBSection
StretchBlt
SelectObject
GetClipBox
CreateCompatibleDC
DeleteObject
DeleteDC
GetDeviceCaps
GetStockObject
SetPixel
GetSystemPaletteEntries
EnumFontFamiliesExW
SetDIBColorTable
GetDIBits
CreateSolidBrush

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegFlushKey
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
RegCloseKey

shell32

SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetFileInfoW
ShellExecuteExW
SHGetFolderLocation
SHGetPathFromIDListW
ShellExecuteW
DragQueryFileW
DragFinish
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
UrlUnescapeW
PathFileExistsW
StrFormatKBSizeW

ole32

OleGetClipboard
CoLockObjectExternal
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoInitializeEx
CoDisconnectObject
CoCreateGuid
CoUninitialize
CoInitialize
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CreateStreamOnHGlobal

oleaut32

SysAllocString
SysStringLen
LoadTypeLi
VariantChangeType
VariantCopy
VarBstrFromDate
SysFreeString
VariantClear
VariantInit
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime

gdiplus

GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImagePalette
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusStartup
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipDisposeImage
GdiplusShutdown
GdipAlloc
GdipCloneImage
GdipFree

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 531KB - Virtual size: 530KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab6326c860b34288c9ab229a698aee88

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

64:ea:ff:cd:1b:c2:0f:c1:24:5f:10:5d:75:3d:0a:d1Certificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

04:74:85:10:53:4e:0f:35:fc:cd:27:d0:0f:6a:dc:29:8d:0b:67:67:7c:6b:84:96:c0:1b:dd:a7:fd:5d:d9:50Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

wininet

msi

uxtheme

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 531KB - Virtual size: 530KB

.data Size: 24KB - Virtual size: 197KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 206KB - Virtual size: 205KB

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

64:ea:ff:cd:1b:c2:0f:c1:24:5f:10:5d:75:3d:0a:d1
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

04:74:85:10:53:4e:0f:35:fc:cd:27:d0:0f:6a:dc:29:8d:0b:67:67:7c:6b:84:96:c0:1b:dd:a7:fd:5d:d9:50
Signer

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 531KB - Virtual size: 530KB

.data
Size: 24KB - Virtual size: 197KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 206KB - Virtual size: 205KB