General

  • Target
    CapCut_7663998941033431061_installer.exe
  • Size 2.7MB
  • Sample260718-2e13cahs2v
  • SHA256 69dbc6f939bf4ac63a90dc56e1e9600b4d4284848a99c4190423c3f856c5961e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • CapCut_7663998941033431061_installer.exe
    .exe 2.7MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll 1.4MB
  • $PLUGINSDIR/res.zip
    .zip 769KB
  • app_warning_icon.png
    .png 10KB
  • banner_bk.jpg
    .jpg 83KB
  • btn_dark_1_disable.png
    .png 495B
  • btn_dark_1_hover.png
    .png 500B
  • btn_dark_1_normal.png
    .png 465B
  • btn_dark_1_pushed.png
    .png 455B
  • btn_dir_disable.png
    .png 634B
  • btn_dir_hover.png
    .png 1KB
  • btn_dir_normal.png
    .png 599B
  • btn_dir_pushed.png
    .png 577B
  • btn_light_1_disable.png
    .png 492B
  • btn_light_1_hover.png
    .png 494B
  • btn_light_1_normal.png
    .png 455B
  • btn_light_1_pushed.png
    .png 480B
  • ckb_1_off.png
    .png 358B
  • ckb_1_on.png
    .png 530B
  • i18n.json
    1KB
  • ic_close.png
    .png 348B
  • ic_close_disabled.png
    .png 348B
  • ic_close_hover.png
    .png 348B
  • ic_close_pushed.png
    .png 348B
  • ic_min.png
    .png 154B
  • ic_min_disabled.png
    .png 154B
  • ic_min_hover.png
    .png 154B
  • ic_min_pushed.png
    .png 154B
  • lang/cs-CZ.json
    4KB
  • lang/de-DE.json
    4KB
  • lang/el-GR.json
    5KB
  • lang/en-US.json
    3KB
  • lang/es-LA.json
    3KB
  • lang/fi-FI.json
    3KB
  • lang/fil-PH.json
    4KB
  • lang/fr-FR.json
    4KB
  • lang/hu-HU.json
    4KB
  • lang/id-ID.json
    3KB
  • lang/it-IT.json
    3KB
  • lang/ja-JP.json
    4KB
  • lang/ko-KR.json
    4KB
  • lang/ms-MY.json
    3KB
  • lang/nl-NL.json
    4KB
  • lang/pl-PL.json
    4KB
  • lang/pt-BR.json
    3KB
  • lang/ro-RO.json
    4KB
  • lang/ru-RU.json
    5KB
  • lang/sv-SE.json
    4KB
  • lang/th-TH.json
    6KB
  • lang/tr-TR.json
    3KB
  • lang/vi-VN.json
    4KB
  • lang/zh-CN.json
    3KB
  • lang/zh-TW.json
    3KB
  • lv_banner_bk.jpg
    .jpg 610KB
  • resource/install.xml
    6KB
  • resource/install_x.xml
    7KB
  • resource/message_box.xml
    .xml 10KB
  • resource/select_lang_msgbox.xml
    .xml 7KB
  • resource/uninstall.xml
    .xml 3KB
  • scroll_bar.png
    .png 267B
  • scrollitem_hot.png
    .png 612B
  • scrollitem_select.png
    .png 883B
  • slider_back.png
    .png 478B
  • slider_fore.png
    .png 294B
  • slider_fore_old.png
    .png 437B
  • textshow1.png
    .png 6KB
  • textshow2.png
    .png 8KB
  • textshow3.png
    .png 8KB
  • $PLUGINSDIR/shell_downloader.dll
    .dll 2.3MB

CapCut_7663998941033431061_installer.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 69dbc6f939bf4ac63a90dc56e1e9600b4d4284848a99c4190423c3f856c5961e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:6f:a4:8d:46:cd:8d:bd:34:5d:3b:c2:a8:ea:be:b1:53:b3:e8:1a:c4:e5:9d:f0:37:06:f8:1c:23:ca:e5:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths