General

  • Target

    70be4982bb67f667f96007088b782aec

  • Size

    3.0MB

  • MD5

    70be4982bb67f667f96007088b782aec

  • SHA1

    261c1ffd5a7c57f70974bd22a7235110dbf506f9

  • SHA256

    e5ce02e25b308d928f354c50fc7cf6f4f69cbc9c76d6051e1f26aa38e10d119a

  • SHA512

    795cc5746299eb795862d6989f17826379414a53b35369960c22fb841a25a1d146aba8e0b3ae082ebaea7a245502e9d2d3fd43b84bcb1cff999676b088368c48

  • SSDEEP

    98304:2u6ZQ+GNCT1MvFJuL0Osqaje5UZQczYq8wg:2Bu+3T1sfOXyeeZNc/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 27 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 70be4982bb67f667f96007088b782aec
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Shortcuts.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DuoMi.exe
    .exe windows:4 windows x86 arch:x86

    1c2324708b6067142f28533d80999f9f


    Headers

    Imports

    Sections

  • Skin/Default.pkg
  • codec/codec.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e75d3e6e2769009a240b6fe0db8f3b6


    Headers

    Imports

    Exports

    Sections

  • codec/codec.xml
  • codec/coreavc0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • codec/mpadecoder.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c21e2eb988753353d88b68e0c925d741


    Headers

    Imports

    Exports

    Sections

  • config/cusconfig.ini
  • config/ipsecdef.dat
  • config/sysconfig.ini
  • config/ĬϷ.lsk
  • cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • dmcbar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5c97ebc86e83c120d56b9fb1ce960811


    Headers

    Imports

    Exports

    Sections

  • dmcommon.dll
    .dll windows:4 windows x86 arch:x86

    84f3bb9b6677b3c151219939a46b580b


    Headers

    Imports

    Exports

    Sections

  • dmdesklyric.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    215ddb5fe0f7be01e6616f809d2d6e16


    Headers

    Imports

    Exports

    Sections

  • dmdnet.dll
    .dll windows:4 windows x86 arch:x86

    bf8c548a81f03e1027f82461bdda354a


    Headers

    Imports

    Exports

    Sections

  • dmload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d0515328cb2b4ed500d279f9dbbac198


    Headers

    Imports

    Exports

    Sections

  • dmlyric.dll
    .dll windows:4 windows x86 arch:x86

    c979ea630f85600844f0089a1df3e159


    Headers

    Imports

    Exports

    Sections

  • dmlyricctrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    af357879fcc6f6e93a735558ed894921


    Headers

    Imports

    Exports

    Sections

  • dmplaycore.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b662d563473ac174ca90f83793e9a698


    Headers

    Imports

    Exports

    Sections

  • dmplayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0bbc9da477c4631a42647413296c59aa


    Headers

    Imports

    Exports

    Sections

  • dmplist.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a813e1ac7d33c51038e74107c1f8e63b


    Headers

    Imports

    Exports

    Sections

  • dmpnet.dll
    .dll windows:4 windows x86 arch:x86

    87d20537e71480abcee138089ac8e0fd


    Headers

    Imports

    Exports

    Sections

  • dmsearch.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    8d4c96d2bb58f7638060080e06b6e0db


    Headers

    Imports

    Exports

    Sections

  • dmsysinfo.dll
    .dll windows:4 windows x86 arch:x86

    ed0009be87deebb89de6bd7398b6c4e1


    Headers

    Imports

    Exports

    Sections

  • dmup.dll
    .dll windows:4 windows x86 arch:x86

    0b2b38fabd3b69a762ada1ce5f31a7c0


    Headers

    Imports

    Exports

    Sections

  • drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • pnetsys.dat
  • raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections