capcut-1-5-0[.]exe

Sharing

Copy URL Twitter E-mail

Reason

scan timeout

General

Target
capcut-1-5-0.exe
Size 388.1MB
Sample260910-ehzmcsfc22
SHA256 765be902c3801d9ff4d7d1ec17f9d9f20dee9904c5bfceabf282135b023a6417
MD5 aa87cdb1bacbf2c0121f628944a68ba2
SHA1 22e0db81c7dfe1662226e3cfd17756647c8f4655
SHA512 6194e092bb5b451a68e802a9e9cc0063d1ce5edf3a72feded7868f7c237b82dfbb21cba313b6184e4fe1a267dfb3a3470158e5f775bfb943dc5b2504dc12d4a5
SSDEEP 6291456:TxgvoEajwaYE6li9leTUv4gzy/E0SfeDWwhK7IJlmc3y0ufjhmNLYaDK/CFzf1Qy:TxXcllijFwgj0DWQK2Uc3y0yMNcarb
TLSH
T104193315BE80C16AE73C23335E7C7C6B285FBC9157A004CB579E7A7C21B0AD25636A93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

capcut-1-5-0.exe

.exe 388.1MB

capcut-1-5-0.exe

IMPHASH 3e4f801fa8c433c12db4de0194c60819
SHA256 765be902c3801d9ff4d7d1ec17f9d9f20dee9904c5bfceabf282135b023a6417
MD5 aa87cdb1bacbf2c0121f628944a68ba2
SHA1 22e0db81c7dfe1662226e3cfd17756647c8f4655
SHA512 6194e092bb5b451a68e802a9e9cc0063d1ce5edf3a72feded7868f7c237b82dfbb21cba313b6184e4fe1a267dfb3a3470158e5f775bfb943dc5b2504dc12d4a5
SSDEEP 6291456:TxgvoEajwaYE6li9leTUv4gzy/E0SfeDWwhK7IJlmc3y0ufjhmNLYaDK/CFzf1Qy:TxXcllijFwgj0DWQK2Uc3y0yMNcarb
TLSH
T104193315BE80C16AE73C23335E7C7C6B285FBC9157A004CB579E7A7C21B0AD25636A93
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

b3:26:fa:34:53:28:d8:ac:a5:09:e6:6a:55:08:cb:71:80:36:61:b6:ea:3b:e7:8d:31:bc:35:63:2a:59:b9:64

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Chains

Feb 14, 2023

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 13, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Serial Number

06:df:4d:93:8e:75:e6:3d:64:8a:be:02:29:5c:d3:3c

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Jul 30, 2025

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

413080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\code\VideoFusion-cc\install\VideofusionInstaller\build\CC_RELEASE\JYInstaller.pdb

kernel32

CreateProcessW GetDiskFreeSpaceExW GetVolumeInformationW GetCurrentProcessId TerminateProcess GetLocalTime GetTickCount GetSystemDirectoryW lstrcmpW CopyFileW MoveFileExW TerminateThread GetPrivateProfileStringA WritePrivateProfileStringA MoveFileW MapViewOfFile InitializeCriticalSection SetEvent ResetEvent CreateEventW CreateMutexW ReleaseMutex GetStdHandle GetFileType GetNativeSystemInfo FindFirstFileExW OutputDebugStringA GetUserDefaultLangID SetEndOfFile SetFilePointerEx FlushFileBuffers QueryPerformanceCounter GetSystemTimeAsFileTime CreateThread IsDebuggerPresent GetModuleHandleExW TlsGetValue TlsSetValue TlsAlloc TlsFree lstrcmpiW GetTimeZoneInformation FreeEnvironmentStringsW GetEnvironmentStringsW ReadConsoleW GetOEMCP GetACP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter ExitProcess SetStdHandle GetConsoleMode GetConsoleCP GetCPInfo RtlUnwind GetStringTypeW EncodePointer VirtualFree VirtualAlloc IsProcessorFeaturePresent InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead OutputDebugStringW LoadLibraryExA UnmapViewOfFile MapViewOfFileEx CreateFileMappingW Sleep LeaveCriticalSection EnterCriticalSection SetFilePointer GetCurrentProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot FreeLibrary OpenProcess WaitForSingleObject LocalFree GetVersionExW SetLastError SetFileAttributesW MultiByteToWideChar ReadFile GetFileSize SetErrorMode GetCommandLineW LoadLibraryExW ProcessIdToSessionId FlushInstructionCache GetCurrentThreadId WideCharToMultiByte CloseHandle WriteFile CreateFileW GetModuleFileNameW InitializeCriticalSectionAndSpinCount RemoveDirectoryW GetFileAttributesW FindNextFileW FindFirstFileW FindClose CreateDirectoryW FindResourceW LoadLibraryW SizeofResource LockResource LoadResource GetProcAddress GetModuleHandleW FindResourceExW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer GetTempPathW DeleteFileW WriteConsoleW SetEnvironmentVariableA

user32

MapWindowPoints GetParent SetWindowPos SetTimer KillTimer PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW TranslateMessage GetMessageW GetDesktopWindow GetDC UnregisterClassW DestroyWindow GetSystemMetrics GetWindowRect GetCursorPos GetWindowLongW SetWindowLongW LoadCursorW MessageBoxW PeekMessageW PostMessageW ShowWindow IsWindowVisible IsIconic CharNextW SetFocus SetForegroundWindow GetMonitorInfoW MonitorFromWindow GetWindow LoadImageW GetWindowDC ReleaseDC SetWindowTextW GetWindowPlacement OffsetRect UpdateLayeredWindow ScreenToClient CreateDialogParamW wsprintfW SetCursor GetClientRect

gdi32

CreateDIBSection DeleteDC GetDeviceCaps DeleteObject GetStockObject CreateCompatibleDC SelectObject GetObjectA

advapi32

AddAce RegDeleteValueW RegQueryInfoKeyW RegEnumKeyExW LookupPrivilegeValueW AdjustTokenPrivileges GetTokenInformation DuplicateTokenEx OpenProcessToken SetNamedSecurityInfoW GetNamedSecurityInfoW IsValidSid InitializeSid InitializeAcl GetSidSubAuthority GetSidLengthRequired GetLengthSid GetAclInformation GetAce CopySid RegSetValueExW RegOpenKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey InitializeSecurityDescriptor SetSecurityDescriptorDacl RegOpenKeyW RegQueryValueExW SetEntriesInAclW BuildExplicitAccessWithNameW

shell32

SHGetFolderPathW SHChangeNotify SHFileOperationW CommandLineToArgvW SHBrowseForFolderW ShellExecuteW SHGetPathFromIDListW

ole32

PropVariantClear CoInitializeEx CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoInitialize CoCreateInstance CoUninitialize

oleaut32

VariantClear SysFreeString VarUI4FromStr SysAllocStringLen SysAllocString

shlwapi

SHSetValueW SHGetValueW PathIsDirectoryW PathGetDriveNumberW PathFindExtensionW ord176 ord12 SHStrDupW PathIsNetworkPathW StrStrIW PathAppendW PathFileExistsW PathRemoveFileSpecW

comctl32

InitCommonControlsEx _TrackMouseEvent

gdiplus

GdipSetStringFormatTrimming GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetTextRenderingHint GdipDrawString GdipDeleteStringFormat GdipGetImageGraphicsContext GdipDrawImagePointRectI GdipCloneBrush GdipFree GdipAlloc GdiplusShutdown GdiplusStartup GdipCreateStringFormat GdipSetImageAttributesColorMatrix GdipDisposeImageAttributes GdipCreateImageAttributes GdipTranslateWorldTransform GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDeleteFont GdipCloneImage GdipDisposeImage GdipDeleteGraphics GdipCreateFromHDC GdipGraphicsClear GdipSetClipRectI GdipRestoreGraphics GdipSaveGraphics GdipDrawImageRectRectI GdipFillRectangleI GdipSetSmoothingMode GdipGetImageHeight GdipGetImageWidth GdipCreateSolidFill GdipCreateBitmapFromScan0 GdipDeleteBrush

Name

.text

Size

528KB

Virtual Size

528KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

112KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

File Explorer

capcut-1-5-0.exe

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

gdiplus

generic