General

  • Target

    Douwan-20220216T234111Z-001.zip

  • Size

    74.1MB

  • MD5

    0d2ff693bf81613bfb99f53ff2d831e4

  • SHA1

    4ae0c2ada1a5d93cbe0b7c59d1da8cb240e5c48e

  • SHA256

    dd3b0befed2321649b5fc7edbbce15495d19aa2dd22a591e2426226793c16189

  • SHA512

    87c80cc8e260f71376cf5d69f0749d9089d29dfeb381c202b04c7ad3482d11bad020e4fd204b5a239f0d7517d06487d9d405a6a667c003f47a8e8356ef9e8240

  • SSDEEP

    1572864:wymujr0+JPpKp4Cn9fDaewXGQxox+Uzll3g24IFdQhuQwzZfaZp0Tm:6b+JPpKCCEe4GQx6+Uzl4SsW8CTm

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Douwan-20220216T234111Z-001.zip
    .zip
  • Douwan/Douwan/Douwan/DouWan Crack.rar
    .rar
  • DouWan Crack/DouWan.exe
    .exe windows:6 windows x64 arch:x64

    197253f92eff8edad438839aaf627bca


    Code Sign

    Headers

    Imports

    Sections

  • DouWan Crack/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Douwan/Douwan/Douwan/DouWan Crack/DouWan Crack/DouWan.exe
    .exe windows:6 windows x64 arch:x64

    197253f92eff8edad438839aaf627bca


    Code Sign

    Headers

    Imports

    Sections

  • Douwan/Douwan/Douwan/DouWan Crack/DouWan Crack/Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Douwan/Douwan/Douwan/DouWan-Video-Setup-En-3.0.0.9-x64.exe
    .exe windows:4 windows x86 arch:x86

    6e7f9a29f2c85394521a08b9f31f6275


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:5 windows x86 arch:x86

    0cd94af3a016a5de4ab9a5a9a02d4173


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • AirPlayInput.dll
    .dll windows:6 windows x64 arch:x64

    922abc5bdec3b131b289c8ac939bdfe0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • DouWan.exe
    .exe windows:6 windows x64 arch:x64

    49735d30f83b5681a96d73dbb9634443


    Code Sign

    Headers

    Imports

    Sections

  • EndUserLicenseAgreement.rtf
    .rtf
  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    6d44a16d5801e1cdb9b3ba4cb45314b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    ddcb78f3a4297344c620aa83af64ddfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    6c684f5759e91250e01af7b49c78ca3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    8ac796c200bcdb47fab6297f47883022


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SDL2.dll
    .dll windows:4 windows x64 arch:x64

    73123a30945afa8cb5e506bb54eedc95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SoftwareLicence.txt
  • VCam/default.png
    .png
  • VCam/default_p.png
    .png
  • VCam/douwan-virtualcam32.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    3e5b76a434ff8a79c0039a3a5b58e79a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • VCam/douwan-virtualcam64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    6cf0a2a9479de999c06e4e7bce4a6d6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • avcodec-58.dll
    .dll windows:6 windows x64 arch:x64

    60fdb7d19d08db5f74c78d735ee59146


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avformat-58.dll
    .dll windows:6 windows x64 arch:x64

    55fb018c854e96733d08775b392784cb


    Headers

    Imports

    Exports

    Sections

  • avutil-56.dll
    .dll windows:6 windows x64 arch:x64

    854f7bb4dc5b07c732fb95035e1930bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bearer/qgenericbearer.dll
    .dll windows:6 windows x64 arch:x64

    7e5a6b3fee029b445d01034aff7a919d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    5f9b23bd4b0029001f687a1ad625be31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    dc71769f237c0a3ba38879380c54a4e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dx9_43.dll
    .dll windows:6 windows x64 arch:x64

    336d8057d1db03e5a3ac3b62e8902f4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • douwan.dll
    .dll windows:6 windows x64 arch:x64

    24cc4c26518db921e67b28cb4c12b49d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • douwanaudio.dll
    .dll windows:6 windows x64 arch:x64

    bdd4b75ff353c7a5ed7ed4f7b43029c5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    870b9d72e7052f0dd8d119bd2bf4aa05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:6 windows x64 arch:x64

    2571158206a6160a4e001934364aa256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:6 windows x64 arch:x64

    f703387b50fa5341f52a2bbf457da55a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libairplay.dll
    .dll windows:6 windows x64 arch:x64

    b667851a00dbb565576487911933d201


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    2508fbe335f97c809e4db3bf312441d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    b1e8eb5f19ad818d17019f27874de691


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mDNSResponder.dll
    .dll windows:6 windows x64 arch:x64

    524bd71274704b641cd9f179d2dc1994


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    c1687527a3d5b7532fa653f66eba12e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    2f8a18fefaba28c3707dae8605d51b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_atomic_wait.dll
    .dll windows:6 windows x64 arch:x64

    c1dfd2e42294117ca33d3c6b21826f93


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_codecvt_ids.dll
    .dll windows:6 windows x64 arch:x64

    536e29dae203b5f7347030aec0cba513


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcrt.dll
    .dll windows:10 windows x64 arch:x64

    1273683626ebba703979f188a1e64237


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opengl32sw.dll
    .dll windows:6 windows x64 arch:x64

    7c204a15e246f025a7513db5a566a6e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/64bit/win-wasapi.dll
    .dll windows:6 windows x64 arch:x64

    12a041ab5e0c4ebc8f46ecc7245fe5f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/64bit/xindawn-audio.dll
    .dll windows:6 windows x64 arch:x64

    87205e2766f92bd6aee88ccbdc8544bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/64bit/xindawn-output.dll
    .dll windows:6 windows x64 arch:x64

    c1e3c21d757043ea3b283032d0f68f88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    3d3040efa646d84bc8bc2fb2d65abf99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swresample-3.dll
    .dll windows:6 windows x64 arch:x64

    41801123b9a4a9ae7939528439923133


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swscale-5.dll
    .dll windows:6 windows x64 arch:x64

    b7cc0c09ae2ca913cd93b5fb8a670eba


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • translations/qt_ar.qm
  • translations/qt_bg.qm
  • translations/qt_ca.qm
  • translations/qt_cs.qm
  • translations/qt_da.qm
  • translations/qt_de.qm
  • translations/qt_en.qm
  • translations/qt_es.qm
  • translations/qt_fi.qm
  • translations/qt_fr.qm
  • translations/qt_gd.qm
  • translations/qt_he.qm
  • translations/qt_hu.qm
  • translations/qt_it.qm
  • translations/qt_ja.qm
  • translations/qt_ko.qm
  • translations/qt_lv.qm
  • translations/qt_pl.qm
  • translations/qt_ru.qm
  • translations/qt_sk.qm
  • translations/qt_tr.qm
  • translations/qt_uk.qm
  • translations/qt_zh_TW.qm
  • ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    57abd1fde351971a01e912069e11b44c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis
  • updater.exe
    .exe windows:5 windows x64 arch:x64

    978daa09971b51cf6710c9d5296f4a75


    Code Sign

    Headers

    Imports

    Sections

  • vcam.dll
    .dll windows:6 windows x64 arch:x64

    9c7b812bb002f91b74128e6f07476ff6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vccorlib140.dll
    .dll windows:6 windows x64 arch:x64

    d5ec94ca50152cc1e7188b825074fef2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • w32-pthreads.dll
    .dll windows:6 windows x64 arch:x64

    0d198a650ddd7e68bb74113c2184eace


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib.dll
    .dll windows:4 windows x64 arch:x64

    572664ceb6c17e28a42c2b54e606a2b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Douwan/Douwan/List.txt