Resubmissions

28/05/2024, 18:16

240528-wwzmyseg3x 8

General

  • Target

    douyin-downloader-v3.2.0-win32-ia32-default.exe

  • Size

    3.0MB

  • MD5

    c9f648b4232628240da0928245642cbe

  • SHA1

    473075aee806293aa5d404ca345f88c5c8973890

  • SHA256

    a6f018539336570425955b25ebdca6f31462e1d5f5c354f627baa9e1d1c5a4a0

  • SHA512

    f5b5a096a74f2fcad1faacd521a3a13e5fb77fcde452564005cbc37342d3aca16df79d2bb6a62a8946895ac1982e2f3587325cc163bf328e526094a3e18fc0da

  • SSDEEP

    49152:cv8vidpLXtQ11lWpzV3GoMdKgJQlP6rFLeSmWTmm7JaISDHDiDfWEIDcJmSNlQXJ:cxTc1ezhGv6lP6rFCSmWaCSDHDdh2lEJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • douyin-downloader-v3.2.0-win32-ia32-default.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • $APPDATA/douyin/native_config
  • $APPDATA/douyin/perf_monitor_cfg.json
  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BgWorker.dll
    .dll windows:4 windows x86 arch:x86

    db2755f409b81c4dbfc04f648cfb80b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ThreadTimer.dll
    .dll windows:5 windows x86 arch:x86

    9192f7f8e3c1c4d1076fa7b7c0dde9b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/downloader_nsis_plugin.dll
    .dll windows:5 windows x86 arch:x86

    2a00a02f6aeaf736577e628d12e8e2f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/shell_downloader.dll
    .dll windows:5 windows x86 arch:x86

    8293750b90711b021c6ef1d7eaf3a5c0


    Code Sign

    Headers

    Imports

    Exports

    Sections