capcut-9-2-0-3931[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
capcut-9-2-0-3931.exe
Size 529.8MB
Sample260825-2dn2dser5w
SHA256 31919ecd4369b5bcdc5b253859582910ab689fa2e9d27c2b6fe4a8f73be188dd
MD5 49a853cc3bb8e47d7bd6ea8ddd8c7d6d
SHA1 5cab6a25d17437fed15d3b14b6b5af7c28a639ed
SHA512 244bad9b4cbd1557ea8ef97caa7d3d1a7d7c6998a5dda1cf2b0fbb55362460c85de6e087fa768c7363ad77b302861150d34647a15e104ab9739db972c28852bb
SSDEEP 12582912:3ZxBl6tLeyVbD6o07d4y7nBfeKGDoH2sX9Y2Rr10nSfBDFrCL:37BgtLtVn64y7BfEDoH2stYA1NBwL
TLSH
T18749331BA728015AE47BC079C526560BDAB27C869731DBCB02DCAA191F37FF09D79324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

capcut-9-2-0-3931.exe

.exe 529.8MB

capcut-9-2-0-3931.exe

IMPHASH e1e3b2aadb2ca0d037dd1536100c8181
SHA256 31919ecd4369b5bcdc5b253859582910ab689fa2e9d27c2b6fe4a8f73be188dd
MD5 49a853cc3bb8e47d7bd6ea8ddd8c7d6d
SHA1 5cab6a25d17437fed15d3b14b6b5af7c28a639ed
SHA512 244bad9b4cbd1557ea8ef97caa7d3d1a7d7c6998a5dda1cf2b0fbb55362460c85de6e087fa768c7363ad77b302861150d34647a15e104ab9739db972c28852bb
SSDEEP 12582912:3ZxBl6tLeyVbD6o07d4y7nBfeKGDoH2sX9Y2Rr10nSfBDFrCL:37BgtLtVn64y7BfEDoH2stYA1NBwL
TLSH
T18749331BA728015AE47BC079C526560BDAB27C869731DBCB02DCAA191F37FF09D79324
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

84:9e:71:72:7b:a9:1e:2c:68:70:8f:0b:14:bd:ee:8d:e5:09:5a:51:2d:d8:7a:4e:e2:e4:69:80:04:4e:84:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Chains

Aug 5, 2026

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Serial Number

0f:76:a4:51:32:93:8a:47:f6:53:2f:ea:5b:22:10:0d

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 8, 2025 - Aug 7, 2028

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

857856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\76724\LVInstaller\VideofusionInstaller\src\JIanyingInstaller\x64\CC_RELEASE\JYInstaller.pdb

winmm

timeGetTime

kernel32

OpenProcess FreeLibrary CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentProcess Sleep CreateThread GetCurrentThreadId ProcessIdToSessionId GetUserDefaultLocaleName GetDiskFreeSpaceExW GetModuleHandleA LoadLibraryExW GetCurrentProcessId SetErrorMode CreateFileMappingW MapViewOfFileEx UnmapViewOfFile lstrcmpiW CreateProcessW GetLocaleInfoW GetUserDefaultLCID GetCommandLineW GetEnvironmentVariableW GetVolumeInformationW TerminateProcess GetExitCodeProcess GetLocalTime GetTickCount GetSystemDirectoryW lstrcmpW CopyFileW MoveFileExW TerminateThread GetTickCount64 GetPrivateProfileStringA WritePrivateProfileStringA MoveFileW MapViewOfFile OutputDebugStringA SetEvent ResetEvent CreateEventW GetNativeSystemInfo GetProductInfo IsWow64Process AcquireSRWLockExclusive GetCurrentDirectoryW DuplicateHandle FindFirstFileExW QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime FlushFileBuffers GetFileSizeEx SetEndOfFile LocalFree SetFilePointerEx SetFileTime IsDebuggerPresent GetModuleHandleExW VirtualAlloc VirtualFree TlsGetValue VirtualQuery TlsSetValue TlsAlloc TlsFree GetSystemInfo RtlCaptureStackBackTrace InitOnceExecuteOnce RtlVirtualUnwind InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache LCMapStringEx FlsAlloc FlsGetValue FlsSetValue FlsFree WriteConsoleW GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter GetVersionExW SetLastError IsProcessorFeaturePresent GetStartupInfoW RtlPcToFileHeader RtlUnwindEx RtlUnwind SetStdHandle GetFileType GetConsoleOutputCP GetConsoleMode ExitProcess SetFileAttributesW ExpandEnvironmentStringsW TryAcquireSRWLockExclusive ReleaseSRWLockExclusive LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetUnhandledExceptionFilter WideCharToMultiByte MultiByteToWideChar CloseHandle WriteFile ReadFile GetFileSize CreateFileW GetModuleFileNameW InitializeCriticalSectionAndSpinCount RemoveDirectoryW GetFileAttributesW FindNextFileW FindFirstFileW GetStdHandle FindClose CreateDirectoryW LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetProcAddress GetModuleHandleW FindResourceExW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer GetTempPathW DeleteFileW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW InitializeSListHead EncodePointer OutputDebugStringW LoadLibraryExA IsValidLocale EnumSystemLocalesW VirtualProtect WaitForSingleObject ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

user32

GetWindowLongW SetTimer KillTimer SetWindowPos MapWindowPoints GetClientRect GetParent GetMonitorInfoW MonitorFromWindow GetWindow SetForegroundWindow SetFocus CharNextW IsIconic IsWindowVisible ShowWindow PostMessageW SetWindowLongW LoadImageW GetWindowDC ReleaseDC SetWindowTextW GetWindowPlacement PeekMessageW MessageBoxW LoadCursorW SetWindowLongPtrW GetWindowRect GetSystemMetrics DestroyWindow PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW TranslateMessage GetMessageW GetDesktopWindow GetDC UnregisterClassW OffsetRect UpdateLayeredWindow ScreenToClient CreateDialogParamW wsprintfW SetCursor IsWindow EnableWindow BringWindowToTop GetCursorPos

gdi32

DeleteObject GetDeviceCaps DeleteDC CreateCompatibleDC CreateDIBSection SelectObject GetStockObject GetObjectA

advapi32

AccessCheck RegDeleteValueW RegQueryInfoKeyW RegEnumKeyExW RegDeleteKeyExW LookupPrivilegeValueW AdjustTokenPrivileges GetTokenInformation DuplicateTokenEx OpenProcessToken SetNamedSecurityInfoW GetNamedSecurityInfoW IsValidSid InitializeSid InitializeAcl GetSidSubAuthority GetSidLengthRequired GetLengthSid GetAclInformation GetAce CopySid AddAce RegSetValueExW RegOpenKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyW SystemFunction036 BuildExplicitAccessWithNameW DuplicateToken GetFileSecurityW InitializeSecurityDescriptor MapGenericMask SetSecurityDescriptorDacl SetEntriesInAclW

shell32

ShellExecuteExW ShellExecuteW SHBrowseForFolderW CommandLineToArgvW SHGetPathFromIDListW SHCreateDirectoryExW SHFileOperationW SHGetFolderPathW SHChangeNotify

ole32

CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoInitializeEx PropVariantClear CoUninitialize

oleaut32

SysFreeString SysAllocString VarUI4FromStr SysAllocStringLen VariantClear

shlwapi

PathRemoveFileSpecW PathFileExistsW ord12 SHCreateStreamOnFileEx StrStrIW PathIsNetworkPathW PathFindExtensionW PathGetDriveNumberW ord176 PathIsDirectoryW SHGetValueW PathAppendW SHSetValueW

comctl32

_TrackMouseEvent InitCommonControlsEx

winhttp

WinHttpReadData WinHttpSetTimeouts WinHttpCloseHandle WinHttpOpen WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpSetOption WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpConnect WinHttpQueryHeaders

gdiplus

GdipSaveGraphics GdipDrawImageRectRectI GdipFillRectangleI GdipSetSmoothingMode GdipGetImageHeight GdipGetImageWidth GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipFree GdipAlloc GdiplusShutdown GdiplusStartup GdipSetClipRectI GdipGraphicsClear GdipCreateFromHDC GdipDeleteGraphics GdipDisposeImage GdipCloneImage GdipDeleteFont GdipDeleteFontFamily GdipDrawImage GdipSetSolidFillColor GdipDrawImagePointRectI GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipDrawString GdipSetTextRenderingHint GdipSetStringFormatLineAlign GdipCreateFontFamilyFromName GdipCreateFont GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipTranslateWorldTransform GdipCreateImageAttributes GdipDisposeImageAttributes GdipRestoreGraphics GdipSetImageAttributesColorMatrix GdipCreateStringFormat GdipDeleteStringFormat GdipMeasureString GdipSetStringFormatTrimming GdipSetStringFormatAlign GdipSetStringFormatFlags

??0MemoryAllocatorDumpGuid@trace_event@base@@QEAA@_K@Z ??0ReadOnlySharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??0UnsafeSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@XZ ??0WritableSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0WritableSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0WritableSharedMemoryRegion@base@@QEAA@XZ ??1ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??1UnsafeSharedMemoryRegion@base@@QEAA@XZ ??1WritableSharedMemoryRegion@base@@QEAA@XZ ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@$$QEAV012@@Z ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@AEBV012@@Z ??4ReadOnlySharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4UnsafeSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4WritableSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??8MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??9MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??MMemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ?ConvertToReadOnly@WritableSharedMemoryRegion@base@@SA?AVReadOnlySharedMemoryRegion@2@V12@@Z ?ConvertToUnsafe@WritableSharedMemoryRegion@base@@SA?AVUnsafeSharedMemoryRegion@2@V12@@Z ?Create@ReadOnlySharedMemoryRegion@base@@SA?AUMappedReadOnlyRegion@2@_K@Z ?Create@UnsafeSharedMemoryRegion@base@@SA?AV12@_K@Z ?Create@WritableSharedMemoryRegion@base@@SA?AV12@_K@Z ?Deserialize@ReadOnlySharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@UnsafeSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@WritableSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Duplicate@ReadOnlySharedMemoryRegion@base@@QEBA?AV12@XZ ?Duplicate@UnsafeSharedMemoryRegion@base@@QEBA?AV12@XZ ?GetGUID@ReadOnlySharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@UnsafeSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@WritableSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetPlatformHandle@ReadOnlySharedMemoryRegion@base@@QEBAPEAXXZ ?GetPlatformHandle@UnsafeSharedMemoryRegion@base@@QEBAPEAXXZ ?GetSize@ReadOnlySharedMemoryRegion@base@@QEBA_KXZ ?GetSize@UnsafeSharedMemoryRegion@base@@QEBA_KXZ ?GetSize@WritableSharedMemoryRegion@base@@QEBA_KXZ ?IsValid@ReadOnlySharedMemoryRegion@base@@QEBA_NXZ ?IsValid@UnsafeSharedMemoryRegion@base@@QEBA_NXZ ?IsValid@WritableSharedMemoryRegion@base@@QEBA_NXZ ?Map@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@XZ ?Map@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?Map@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?MapAt@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@J_K@Z ?MapAt@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?MapAt@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?TakeHandleForSerialization@ReadOnlySharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@UnsafeSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@WritableSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?ThrowBadVariantAccess@variant_internal@absl@@YAXXZ ?ToUint64@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_KXZ ?UnsafeGetPlatformHandle@WritableSharedMemoryRegion@base@@QEBAPEAXXZ ?create_hook_@ReadOnlySharedMemoryRegion@base@@0P6A?AUMappedReadOnlyRegion@2@_K@ZEA ?create_hook_@UnsafeSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?create_hook_@WritableSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?empty@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NXZ ?g_swallow_stream@logging@@3PEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@EA ?kDisableBestEffortTasks@switches@@3QBDB ?kDisableBreakpad@switches@@3QBDB ?kDisableFeatures@switches@@3QBDB ?kDisableHighResTimer@switches@@3QBDB ?kDisableLowEndDeviceMode@switches@@3QBDB ?kDisableUsbKeyboardDetect@switches@@3QBDB ?kEnableBackgroundThreadPool@switches@@3QBDB ?kEnableCrashReporter@switches@@3QBDB ?kEnableFeatures@switches@@3QBDB ?kEnableLowEndDeviceMode@switches@@3QBDB ?kForceFieldTrials@switches@@3QBDB ?kFullMemoryCrashReport@switches@@3QBDB ?kLogBestEffortTasks@switches@@3QBDB ?kNoErrorDialogs@switches@@3QBDB ?kProfilingAtStart@switches@@3QBDB ?kProfilingFile@switches@@3QBDB ?kProfilingFlush@switches@@3QBDB ?kTestChildProcess@switches@@3QBDB ?kTestDoNotInitializeIcu@switches@@3QBDB ?kTraceToFile@switches@@3QBDB ?kTraceToFileName@switches@@3QBDB ?kV@switches@@3QBDB ?kVModule@switches@@3QBDB ?kWaitForDebugger@switches@@3QBDB ?set_create_hook@ReadOnlySharedMemoryRegion@base@@CAXP6A?AUMappedReadOnlyRegion@2@_K@Z@Z ?set_create_hook@UnsafeSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?set_create_hook@WritableSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?throw_bad_optional_access@optional_internal@absl@@YAXXZ GetHandleVerifier

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

capcut-9-2-0-3931.exe

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

winhttp

gdiplus

generic