YouTube[.]Music[.]Desktop[.]App-2[.]0[.]12[.]Setup[.]exe

General

Target
YouTube.Music.Desktop.App-2.0.12.Setup.exe
Size 150.1MB
Sample261002-xtck3sweld
SHA256 e8962c322ce67dd04e638685cd2c21d188a2c72640d1cd65b74cc58c1912652a
MD5 5205278030379d91827c06ffe3717d3d
SHA1 b4589d08cc4e6bc3338c866496961fdf00485d6c
SHA512 738cf189429f68ddb99dd2e79cebb522c08b7396c7b5871ff96b8b640d51b7bb604d0a1b58b481db06bec4f145eb4e4d18ef47c1f481398475142fe653d2aa89
SSDEEP 3145728:xXWCftaD9GVD+2GrrMD5bB3AHy3E16wbowHSYMm+20wNLgqvu9F:xXdYrr0hB6kwbxyv0gqvuf
TLSH
T1C57833C62096881BDD334D736A339FA80527F677263E0F81175173E89E732D1AB76862
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YouTube.Music.Desktop.App-2.0.12.Setup.exe

File Explorer

YouTube.Music.Desktop.App-2.0.12.Setup.exe

.exe 150.1MB

YouTube.Music.Desktop.App-2.0.12.Setup.exe

IMPHASH e6f4169f2a5c3a8f93171d9f593bd22a
SHA256 e8962c322ce67dd04e638685cd2c21d188a2c72640d1cd65b74cc58c1912652a
MD5 5205278030379d91827c06ffe3717d3d
SHA1 b4589d08cc4e6bc3338c866496961fdf00485d6c
SHA512 738cf189429f68ddb99dd2e79cebb522c08b7396c7b5871ff96b8b640d51b7bb604d0a1b58b481db06bec4f145eb4e4d18ef47c1f481398475142fe653d2aa89
SSDEEP 3145728:xXWCftaD9GVD+2GrrMD5bB3AHy3E16wbowHSYMm+20wNLgqvu9F:xXdYrr0hB6kwbxyv0gqvuf
TLSH
T1C57833C62096881BDD334D736A339FA80527F677263E0F81175173E89E732D1AB76862
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

43868

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\Setup.pdb

kernel32

LoadResource FindResourceW lstrlenW GetProcAddress GetModuleHandleW DeleteCriticalSection GetTempPathW GetLastError GetTempFileNameW MoveFileW WaitForSingleObject GetExitCodeProcess CloseHandle DeleteFileW GetModuleFileNameW GetCurrentProcess LoadLibraryW FreeLibrary InitializeCriticalSectionEx GetFileAttributesW CreateFileW SetFilePointer ReadFile VerSetConditionMask GetCurrentDirectoryW MultiByteToWideChar LocalFileTimeToFileTime WideCharToMultiByte CreateDirectoryW WriteFile SetFileTime FreeResource SizeofResource LockResource CreateProcessW GetSystemDirectoryW SetDefaultDllDirectories GetCurrentThreadId DecodePointer RaiseException LeaveCriticalSection EnterCriticalSection lstrcmpiW LoadLibraryExW GetConsoleMode GetConsoleCP SystemTimeToFileTime VerifyVersionInfoW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle HeapFree HeapAlloc GetFileType CompareStringW LCMapStringW HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW GetFileSizeEx SetFilePointerEx FlushFileBuffers WriteConsoleW

shlwapi

PathIsUNCW

comctl32

InitCommonControlsEx

Sharing