General

  • Target

    douyin-downloader-v3.5.1-win32-ia32-douyinlogin-wid-8MfcAHFOdKG.exe

  • Size

    3.0MB

  • MD5

    6855fa3667b3883fefa174260db1e949

  • SHA1

    55bc8f8d8e4fd669459f90c0b16c846c5f8a6be4

  • SHA256

    e907d2c7ba3274b072838089ea1039e925255e7bab7d94d696b33a5f8e9c0692

  • SHA512

    01dbac60018784245cd9f30abb926d2956fe33de728fe6b7a905b10649b028e4dc62bc2392845de0328a5941087b490e8a1433442f7abf2fe5b03be3dfcff14d

  • SSDEEP

    49152:/OojxkK9tQ11lWpzV3GoMdKgLxDPKPLTzRHQMYdoOz+4fSkVaDCXKxbKpRPfrhBw:/XjSKe1ezhGvLlkLfJQMYdtBTVams0Nk

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • douyin-downloader-v3.5.1-win32-ia32-douyinlogin-wid-8MfcAHFOdKG.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $APPDATA/douyin/native_config
  • $APPDATA/douyin/perf_monitor_cfg.json
  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ThreadTimer.dll
    .dll windows:5 windows x86 arch:x86

    9192f7f8e3c1c4d1076fa7b7c0dde9b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll windows:5 windows x86 arch:x86

    2a00a02f6aeaf736577e628d12e8e2f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/shell_downloader.dll
    .dll windows:5 windows x86 arch:x86

    8293750b90711b021c6ef1d7eaf3a5c0


    Code Sign

    Headers

    Imports

    Exports

    Sections