General

  • Target
    capcut_capcutpc_0_1.2.6_installer.exe
  • Size 2.2MB
  • Sample260804-eaz8xsce38
  • SHA256 4a9d815f284adda187982e2b24da2beaad860739bc4b4cb1cf26408e7c221dd6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • capcut_capcutpc_0_1.2.6_installer.exe
    .exe 2.2MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/deviceregister_shared.dll
    .dll 226KB
  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll 1.2MB
  • $PLUGINSDIR/res.zip
    .zip 162KB
  • app_warning_icon.png
    .png 10KB
  • banner_bk.jpg
    .jpg 83KB
  • btn_dark_1_disable.png
    .png 495B
  • btn_dark_1_hover.png
    .png 500B
  • btn_dark_1_normal.png
    .png 465B
  • btn_dark_1_pushed.png
    .png 455B
  • btn_dir_disable.png
    .png 634B
  • btn_dir_hover.png
    .png 1KB
  • btn_dir_normal.png
    .png 599B
  • btn_dir_pushed.png
    .png 577B
  • btn_light_1_disable.png
    .png 492B
  • btn_light_1_hover.png
    .png 494B
  • btn_light_1_normal.png
    .png 455B
  • btn_light_1_pushed.png
    .png 480B
  • ckb_1_off.png
    .png 358B
  • ckb_1_on.png
    .png 530B
  • i18n.json
    1KB
  • ic_close.png
    .png 348B
  • ic_close_disabled.png
    .png 348B
  • ic_close_hover.png
    .png 348B
  • ic_close_pushed.png
    .png 348B
  • ic_min.png
    .png 154B
  • ic_min_disabled.png
    .png 154B
  • ic_min_hover.png
    .png 154B
  • ic_min_pushed.png
    .png 154B
  • lang/cs-CZ.json
    2KB
  • lang/de-DE.json
    2KB
  • lang/el-GR.json
    3KB
  • lang/en-US.json
    2KB
  • lang/es-LA.json
    2KB
  • lang/fi-FI.json
    2KB
  • lang/fil-PH.json
    2KB
  • lang/fr-FR.json
    2KB
  • lang/hu-HU.json
    2KB
  • lang/id-ID.json
    2KB
  • lang/it-IT.json
    2KB
  • lang/ja-JP.json
    3KB
  • lang/ko-KR.json
    2KB
  • lang/ms-MY.json
    2KB
  • lang/nl-NL.json
    2KB
  • lang/pl-PL.json
    2KB
  • lang/pt-BR.json
    2KB
  • lang/ro-RO.json
    2KB
  • lang/ru-RU.json
    3KB
  • lang/sv-SE.json
    2KB
  • lang/th-TH.json
    3KB
  • lang/tr-TR.json
    2KB
  • lang/vi-VN.json
    2KB
  • lang/zh-CN.json
    2KB
  • lang/zh-TW.json
    2KB
  • resource/install.xml
    6KB
  • resource/message_box.xml
    .xml 7KB
  • resource/select_lang_msgbox.xml
    .xml 7KB
  • resource/uninstall.xml
    .xml 3KB
  • scroll_bar.png
    .png 267B
  • scrollitem_hot.png
    .png 612B
  • scrollitem_select.png
    .png 883B
  • slider_back.png
    .png 478B
  • slider_fore.png
    .png 294B
  • slider_fore_old.png
    .png 437B
  • textshow1.png
    .png 6KB
  • textshow2.png
    .png 8KB
  • textshow3.png
    .png 8KB
  • $PLUGINSDIR/shell_downloader.dll
    .dll 2.3MB

capcut_capcutpc_0_1.2.6_installer.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 4a9d815f284adda187982e2b24da2beaad860739bc4b4cb1cf26408e7c221dd6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
48:bc:57:cb:41:8b:89:f0:6b:f2:a3:6f:79:0b:94:93:05:79:5b:0a:e1:ab:c2:43:ec:c4:90:82:aa:9f:05:29
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths