Static task
static1
Behavioral task
behavioral1
Sample
HDoujin Downloader.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HDoujin Downloader.exe
Resource
win10v2004-20230220-en
General
-
Target
HDoujin Downloader.exe
-
Size
10.0MB
-
MD5
49edbb1c706b996bce35f65932def289
-
SHA1
81b94266c60ea85e756808ec66ef3a0c43736929
-
SHA256
4efbb10cc9f73cc007b93700f4c660251b7fb7d7b72145a80ce814a4edbdef9f
-
SHA512
0c0929e91f46d409488aaeb917dafe340aba8184ca12bbfdae70de6b883f03ed22998265263f77cc249ce6a15adb5e8db84e794f0b0f1c6fbd23ae9539d7b83a
-
SSDEEP
196608:3lv5FC37pS469D+IyjGRGiW4TgzPRr8pU/XJe:1RFfn9DRm2TgLR/fJe
Malware Config
Signatures
Files
-
HDoujin Downloader.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7f:29:c8:09:3c:26:98:81:4c:48:00:1a:8a:71:ce:06Certificate
IssuerCN=doujindownloader.comNot Before14/01/2020, 00:25Not After31/12/2039, 23:59SubjectCN=doujindownloader.com30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before23/10/2020, 00:00Not After22/01/2032, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
62:d1:da:a9:92:ea:08:c7:c9:34:d3:52:c4:f0:22:cd:0f:78:b9:8cSigner
Actual PE Digest62:d1:da:a9:92:ea:08:c7:c9:34:d3:52:c4:f0:22:cd:0f:78:b9:8cDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=doujindownloader.com30/03/2023, 10:55 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
}]_:N+ Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ