General

  • Target
    capcut_capcutpc_invitefission_1.2.29_installer.exe
  • Size 2.7MB
  • Sample260816-dy2afscl4x
  • SHA256 93d01033730f0fcb912f341b37b4a2f3fef72fafaee69ecd0545ac2bb0cbf459
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • capcut_capcutpc_invitefission_1.2.29_installer.exe
    .exe 2.7MB
  • $PLUGINSDIR/BgWorker.dll
    .dll 2KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll 1.4MB
  • $PLUGINSDIR/res.zip
    .zip 769KB
  • app_warning_icon.png
    .png 10KB
  • banner_bk.jpg
    .jpg 83KB
  • btn_dark_1_disable.png
    .png 495B
  • btn_dark_1_hover.png
    .png 500B
  • btn_dark_1_normal.png
    .png 465B
  • btn_dark_1_pushed.png
    .png 455B
  • btn_dir_disable.png
    .png 634B
  • btn_dir_hover.png
    .png 1KB
  • btn_dir_normal.png
    .png 599B
  • btn_dir_pushed.png
    .png 577B
  • btn_light_1_disable.png
    .png 492B
  • btn_light_1_hover.png
    .png 494B
  • btn_light_1_normal.png
    .png 455B
  • btn_light_1_pushed.png
    .png 480B
  • ckb_1_off.png
    .png 358B
  • ckb_1_on.png
    .png 530B
  • i18n.json
    1KB
  • ic_close.png
    .png 348B
  • ic_close_disabled.png
    .png 348B
  • ic_close_hover.png
    .png 348B
  • ic_close_pushed.png
    .png 348B
  • ic_min.png
    .png 154B
  • ic_min_disabled.png
    .png 154B
  • ic_min_hover.png
    .png 154B
  • ic_min_pushed.png
    .png 154B
  • lang/cs-CZ.json
    4KB
  • lang/de-DE.json
    4KB
  • lang/el-GR.json
    5KB
  • lang/en-US.json
    3KB
  • lang/es-LA.json
    3KB
  • lang/fi-FI.json
    3KB
  • lang/fil-PH.json
    4KB
  • lang/fr-FR.json
    4KB
  • lang/hu-HU.json
    4KB
  • lang/id-ID.json
    3KB
  • lang/it-IT.json
    3KB
  • lang/ja-JP.json
    4KB
  • lang/ko-KR.json
    4KB
  • lang/ms-MY.json
    3KB
  • lang/nl-NL.json
    4KB
  • lang/pl-PL.json
    4KB
  • lang/pt-BR.json
    3KB
  • lang/ro-RO.json
    4KB
  • lang/ru-RU.json
    5KB
  • lang/sv-SE.json
    4KB
  • lang/th-TH.json
    6KB
  • lang/tr-TR.json
    3KB
  • lang/vi-VN.json
    4KB
  • lang/zh-CN.json
    3KB
  • lang/zh-TW.json
    3KB
  • lv_banner_bk.jpg
    .jpg 610KB
  • resource/install.xml
    6KB
  • resource/install_x.xml
    7KB
  • resource/message_box.xml
    .xml 10KB
  • resource/select_lang_msgbox.xml
    .xml 7KB
  • resource/uninstall.xml
    .xml 3KB
  • scroll_bar.png
    .png 267B
  • scrollitem_hot.png
    .png 612B
  • scrollitem_select.png
    .png 883B
  • slider_back.png
    .png 478B
  • slider_fore.png
    .png 294B
  • slider_fore_old.png
    .png 437B
  • textshow1.png
    .png 6KB
  • textshow2.png
    .png 8KB
  • textshow3.png
    .png 8KB
  • $PLUGINSDIR/shell_downloader.dll
    .dll 2.3MB

capcut_capcutpc_invitefission_1.2.29_installer.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 93d01033730f0fcb912f341b37b4a2f3fef72fafaee69ecd0545ac2bb0cbf459
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b6:68:a5:05:f5:71:87:05:eb:86:e3:3f:8d:82:2c:db:58:28:74:50:38:ee:7e:e9:eb:93:8b:16:9a:65:d2:9f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths