CapCut_8_5_0_3590_capcutpc_0_creatortool[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
CapCut_8_5_0_3590_capcutpc_0_creatortool.exe
Size 569.0MB
Sample260804-a6vabsac97
SHA256 0c1be1820f4363d9cbb739b832a90282a2608f56903177d40ddfd94fbd87c53c
MD5 b1fbf67ac1299f473b71386d9e234f2f
SHA1 d41d234984cfa57fa421ed9a03cf47a2681380df
SHA512 5bde8baeeb8ef155267cfc7f7feef22d924575100d04d078fbb9d098c1510ebb453abfe4b205fb97d72dd620dc8293c60ed8ccc9304889a75270998e5ed745f9
SSDEEP 12582912:xExBjE/mLs6csLAIcE9lPaTXpPFH/1HknW0ykWA6G4Gmel7o7gc:xGBjEOWsAE6lZfG4a7o7gc
TLSH
T12F59331AB2784094E1E3D0349911AB1BEAB2BC42932047DF15D5BFA62F73BE1EE35711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

CapCut_8_5_0_3590_capcutpc_0_creatortool.exe

.exe 569.0MB

CapCut_8_5_0_3590_capcutpc_0_creatortool.exe

IMPHASH f93cb99c6065ad11f1b3d293d516e8c0
SHA256 0c1be1820f4363d9cbb739b832a90282a2608f56903177d40ddfd94fbd87c53c
MD5 b1fbf67ac1299f473b71386d9e234f2f
SHA1 d41d234984cfa57fa421ed9a03cf47a2681380df
SHA512 5bde8baeeb8ef155267cfc7f7feef22d924575100d04d078fbb9d098c1510ebb453abfe4b205fb97d72dd620dc8293c60ed8ccc9304889a75270998e5ed745f9
SSDEEP 12582912:xExBjE/mLs6csLAIcE9lPaTXpPFH/1HknW0ykWA6G4Gmel7o7gc:xGBjEOWsAE6lZfG4a7o7gc
TLSH
T12F59331AB2784094E1E3D0349911AB1BEAB2BC42932047DF15D5BFA62F73BE1EE35711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Password

awdescargas.com

Digest

db:1a:51:21:70:fd:c9:31:38:92:3b:e0:0d:95:ce:c5:32:a1:5b:16:39:09:ef:d8:89:e8:cf:91:eb:30:bc:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Chains

Apr 15, 2026

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Serial Number

0f:76:a4:51:32:93:8a:47:f6:53:2f:ea:5b:22:10:0d

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 8, 2025 - Aug 7, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

870192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\76724\LVInstaller\VideofusionInstaller\src\JIanyingInstaller\x64\CC_RELEASE\JYInstaller.pdb

winmm

timeGetTime

kernel32

OpenProcess FreeLibrary CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentProcess Sleep CreateThread GetCurrentThreadId ProcessIdToSessionId GetUserDefaultLocaleName GetModuleHandleA LoadLibraryExW GetCurrentProcessId SetErrorMode CreateFileMappingW MapViewOfFileEx UnmapViewOfFile lstrcmpiW CreateProcessW GetLocaleInfoW GetUserDefaultLCID GetCommandLineW GetEnvironmentVariableW CreateFileA GetDiskFreeSpaceExW GetVolumeInformationW TerminateProcess GetExitCodeProcess GetLocalTime GetTickCount GetSystemDirectoryW lstrcmpW CopyFileW MoveFileExW TerminateThread GetTickCount64 GetPrivateProfileStringA WritePrivateProfileStringA MoveFileW MapViewOfFile SetEvent ResetEvent CreateEventW GetNativeSystemInfo GetProductInfo IsWow64Process AcquireSRWLockExclusive GetCurrentDirectoryW DuplicateHandle FindFirstFileExW OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime FlushFileBuffers GetFileSizeEx SetEndOfFile LocalFree SetFilePointerEx SetFileTime IsDebuggerPresent GetModuleHandleExW VirtualAlloc VirtualFree TlsGetValue VirtualQuery TlsSetValue TlsAlloc TlsFree GetSystemInfo RtlCaptureStackBackTrace InitializeSRWLock InitOnceExecuteOnce RtlVirtualUnwind InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache TryEnterCriticalSection LCMapStringEx FlsAlloc FlsGetValue FlsSetValue FlsFree WriteConsoleW GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter GetVersionExW DeviceIoControl SetLastError IsProcessorFeaturePresent GetStartupInfoW RtlPcToFileHeader RtlUnwindEx RtlUnwind SetStdHandle GetFileType GetConsoleOutputCP GetConsoleMode ExitProcess SetFileAttributesW ExpandEnvironmentStringsW TryAcquireSRWLockExclusive ReleaseSRWLockExclusive LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetUnhandledExceptionFilter WideCharToMultiByte MultiByteToWideChar CloseHandle WriteFile ReadFile GetFileSize CreateFileW GetModuleFileNameW InitializeCriticalSectionAndSpinCount RemoveDirectoryW GetFileAttributesW FindNextFileW FindFirstFileW GetStdHandle FindClose CreateDirectoryW LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetProcAddress GetModuleHandleW FindResourceExW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer GetTempPathW DeleteFileW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW InitializeSListHead EncodePointer OutputDebugStringW LoadLibraryExA IsValidLocale EnumSystemLocalesW VirtualProtect WaitForSingleObject GetTimeZoneInformation ReadConsoleW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

user32

GetWindowLongW SetTimer KillTimer SetWindowPos MapWindowPoints GetClientRect GetParent GetMonitorInfoW MonitorFromWindow GetWindow SetForegroundWindow SetFocus CharNextW IsIconic IsWindowVisible ShowWindow PostMessageW SetWindowLongW LoadImageW GetWindowDC ReleaseDC SetWindowTextW GetWindowPlacement PeekMessageW MessageBoxW LoadCursorW SetWindowLongPtrW GetWindowRect GetSystemMetrics DestroyWindow PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW TranslateMessage GetMessageW GetDesktopWindow GetDC UnregisterClassW OffsetRect UpdateLayeredWindow ScreenToClient CreateDialogParamW wsprintfW SetCursor IsWindow EnableWindow BringWindowToTop GetCursorPos

gdi32

DeleteObject GetDeviceCaps DeleteDC CreateCompatibleDC CreateDIBSection SelectObject GetStockObject GetObjectA

advapi32

AccessCheck RegDeleteValueW RegQueryInfoKeyW RegEnumKeyExW RegDeleteKeyExW LookupPrivilegeValueW AdjustTokenPrivileges GetTokenInformation DuplicateTokenEx OpenProcessToken SetNamedSecurityInfoW GetNamedSecurityInfoW IsValidSid InitializeSid InitializeAcl GetSidSubAuthority GetSidLengthRequired GetLengthSid GetAclInformation GetAce CopySid AddAce RegSetValueExW RegOpenKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyW SystemFunction036 BuildExplicitAccessWithNameW DuplicateToken GetFileSecurityW InitializeSecurityDescriptor MapGenericMask SetSecurityDescriptorDacl SetEntriesInAclW

shell32

ShellExecuteExW ShellExecuteW SHBrowseForFolderW CommandLineToArgvW SHGetPathFromIDListW SHCreateDirectoryExW SHFileOperationW SHGetFolderPathW SHChangeNotify

ole32

CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoInitializeEx PropVariantClear CoUninitialize

oleaut32

SysFreeString SysAllocString VarUI4FromStr SysAllocStringLen VariantClear

shlwapi

PathRemoveFileSpecW PathFileExistsW PathMatchSpecW ord12 SHCreateStreamOnFileEx PathIsNetworkPathW PathFindExtensionW PathGetDriveNumberW StrStrIW ord176 PathIsDirectoryW SHGetValueW PathAppendW SHSetValueW

comctl32

_TrackMouseEvent InitCommonControlsEx

winhttp

WinHttpReadData WinHttpSetTimeouts WinHttpCloseHandle WinHttpOpen WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpSetOption WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpConnect WinHttpQueryHeaders

gdiplus

GdipSaveGraphics GdipDrawImageRectRectI GdipFillRectangleI GdipSetSmoothingMode GdipGetImageHeight GdipGetImageWidth GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipFree GdipAlloc GdiplusShutdown GdiplusStartup GdipSetClipRectI GdipGraphicsClear GdipCreateFromHDC GdipDeleteGraphics GdipDisposeImage GdipCloneImage GdipDeleteFont GdipDeleteFontFamily GdipDrawImage GdipSetSolidFillColor GdipDrawImagePointRectI GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipDrawString GdipSetTextRenderingHint GdipSetStringFormatLineAlign GdipCreateFontFamilyFromName GdipCreateFont GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipTranslateWorldTransform GdipCreateImageAttributes GdipDisposeImageAttributes GdipRestoreGraphics GdipSetImageAttributesColorMatrix GdipCreateStringFormat GdipDeleteStringFormat GdipMeasureString GdipSetStringFormatTrimming GdipSetStringFormatAlign GdipSetStringFormatFlags

iphlpapi

GetAdaptersAddresses

??0MemoryAllocatorDumpGuid@trace_event@base@@QEAA@_K@Z ??0ReadOnlySharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??0UnsafeSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@XZ ??0WritableSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0WritableSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0WritableSharedMemoryRegion@base@@QEAA@XZ ??1ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??1UnsafeSharedMemoryRegion@base@@QEAA@XZ ??1WritableSharedMemoryRegion@base@@QEAA@XZ ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@$$QEAV012@@Z ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@AEBV012@@Z ??4ReadOnlySharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4UnsafeSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4WritableSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??8MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??9MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??MMemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ?ConvertToReadOnly@WritableSharedMemoryRegion@base@@SA?AVReadOnlySharedMemoryRegion@2@V12@@Z ?ConvertToUnsafe@WritableSharedMemoryRegion@base@@SA?AVUnsafeSharedMemoryRegion@2@V12@@Z ?Create@ReadOnlySharedMemoryRegion@base@@SA?AUMappedReadOnlyRegion@2@_K@Z ?Create@UnsafeSharedMemoryRegion@base@@SA?AV12@_K@Z ?Create@WritableSharedMemoryRegion@base@@SA?AV12@_K@Z ?Deserialize@ReadOnlySharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@UnsafeSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@WritableSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Duplicate@ReadOnlySharedMemoryRegion@base@@QEBA?AV12@XZ ?Duplicate@UnsafeSharedMemoryRegion@base@@QEBA?AV12@XZ ?GetGUID@ReadOnlySharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@UnsafeSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@WritableSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetPlatformHandle@ReadOnlySharedMemoryRegion@base@@QEBAPEAXXZ ?GetPlatformHandle@UnsafeSharedMemoryRegion@base@@QEBAPEAXXZ ?GetSize@ReadOnlySharedMemoryRegion@base@@QEBA_KXZ ?GetSize@UnsafeSharedMemoryRegion@base@@QEBA_KXZ ?GetSize@WritableSharedMemoryRegion@base@@QEBA_KXZ ?IsValid@ReadOnlySharedMemoryRegion@base@@QEBA_NXZ ?IsValid@UnsafeSharedMemoryRegion@base@@QEBA_NXZ ?IsValid@WritableSharedMemoryRegion@base@@QEBA_NXZ ?Map@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@XZ ?Map@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?Map@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?MapAt@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@J_K@Z ?MapAt@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?MapAt@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?TakeHandleForSerialization@ReadOnlySharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@UnsafeSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@WritableSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?ThrowBadVariantAccess@variant_internal@absl@@YAXXZ ?ToUint64@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_KXZ ?UnsafeGetPlatformHandle@WritableSharedMemoryRegion@base@@QEBAPEAXXZ ?create_hook_@ReadOnlySharedMemoryRegion@base@@0P6A?AUMappedReadOnlyRegion@2@_K@ZEA ?create_hook_@UnsafeSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?create_hook_@WritableSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?empty@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NXZ ?g_swallow_stream@logging@@3PEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@EA ?kDisableBestEffortTasks@switches@@3QBDB ?kDisableBreakpad@switches@@3QBDB ?kDisableFeatures@switches@@3QBDB ?kDisableHighResTimer@switches@@3QBDB ?kDisableLowEndDeviceMode@switches@@3QBDB ?kDisableUsbKeyboardDetect@switches@@3QBDB ?kEnableBackgroundThreadPool@switches@@3QBDB ?kEnableCrashReporter@switches@@3QBDB ?kEnableFeatures@switches@@3QBDB ?kEnableLowEndDeviceMode@switches@@3QBDB ?kForceFieldTrials@switches@@3QBDB ?kFullMemoryCrashReport@switches@@3QBDB ?kLogBestEffortTasks@switches@@3QBDB ?kNoErrorDialogs@switches@@3QBDB ?kProfilingAtStart@switches@@3QBDB ?kProfilingFile@switches@@3QBDB ?kProfilingFlush@switches@@3QBDB ?kTestChildProcess@switches@@3QBDB ?kTestDoNotInitializeIcu@switches@@3QBDB ?kTraceToFile@switches@@3QBDB ?kTraceToFileName@switches@@3QBDB ?kV@switches@@3QBDB ?kVModule@switches@@3QBDB ?kWaitForDebugger@switches@@3QBDB ?set_create_hook@ReadOnlySharedMemoryRegion@base@@CAXP6A?AUMappedReadOnlyRegion@2@_K@Z@Z ?set_create_hook@UnsafeSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?set_create_hook@WritableSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?throw_bad_optional_access@optional_internal@absl@@YAXXZ GetHandleVerifier

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

248KB

Virtual Size

247KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

CapCut_8_5_0_3590_capcutpc_0_creatortool.exe

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

winhttp

gdiplus

iphlpapi

generic