youtube-dl[.]exe | Triage™

General

Target
youtube-dl.exe
Size 7.9MB
Sample260721-pgp2msvgrc
SHA256 0823edc54e49e5b2aff1762c745c8dae13d8ba93d6977926a071b6f999f61537
MD5 d6273ebb814fe9a135ab0d20d2be1836
SHA1 5e213cc89d7f8f7e3efe0e23f28a0d86350b19bd
SHA512 6934bee48b41486532e1e507bae7a1832da798d67f618e325685e7e90b443416c4946bb6300116393bc82cb9be17b98c123b103b4294830956857bb8392650a8
SSDEEP 98304:3gJRHgOjfrjHumMb1hsjYlCFA5ef+KZ77KWhDFZ0cdtRko3OVOyO62is4Akeskyw:w/8LkFcef+CftRFOVJOxr4AkhWjU42Y
TLSH
T1E0860230B9428135EDF528B7E37A49B659284C147B1BF1F396EC74C059B11E32AFA24E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
youtube-dl.exe

File Explorer

youtube-dl.exe

.exe 7.9MB

youtube-dl.exe

IMPHASH 985a7b86c383570b8555b38c1f270b55
SHA256 0823edc54e49e5b2aff1762c745c8dae13d8ba93d6977926a071b6f999f61537
MD5 d6273ebb814fe9a135ab0d20d2be1836
SHA1 5e213cc89d7f8f7e3efe0e23f28a0d86350b19bd
SHA512 6934bee48b41486532e1e507bae7a1832da798d67f618e325685e7e90b443416c4946bb6300116393bc82cb9be17b98c123b103b4294830956857bb8392650a8
SSDEEP 98304:3gJRHgOjfrjHumMb1hsjYlCFA5ef+KZ77KWhDFZ0cdtRko3OVOyO62is4Akeskyw:w/8LkFcef+CftRFOVJOxr4AkhWjU42Y
TLSH
T1E0860230B9428135EDF528B7E37A49B659284C147B1BF1F396EC74C059B11E32AFA24E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13946

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

MessageBoxA

shell32

SHGetSpecialFolderPathW

msvcr100

_lock _except_handler4_common _invoke_watson _controlfp_s _crt_debugger_hook __dllonexit _unlock ?terminate@@YAXXZ __set_app_type _fmode _commode __setusermatherr _configthreadlocale _initterm_e _initterm __winitenv exit _XcptFilter _exit _cexit __wgetmainargs _amsg_exit malloc _strdup strtol wcstombs strncmp free _stricmp realloc memset memcpy _fileno _setmode setvbuf atoi getenv _snwprintf wcsncmp wcsrchr fprintf __iob_func strncpy _onexit

kernel32

IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DecodePointer SetUnhandledExceptionFilter EncodePointer HeapSetInformation InterlockedCompareExchange Sleep InterlockedExchange OutputDebugStringA GetModuleHandleW SetDllDirectoryW SetDllDirectoryA GetModuleHandleA HeapAlloc GetThreadLocale lstrlenA GetProcessHeap HeapFree GetProcAddress IsBadReadPtr SetLastError VirtualFree VirtualProtect VirtualAlloc LoadLibraryExW SizeofResource FreeLibrary LoadLibraryA FindResourceA LoadResource LockResource GetModuleFileNameW GetLastError FormatMessageA LocalFree TerminateProcess

Sharing