General

  • Target

    7b00af1448e6e839175aeb0eab06adf6

  • Size

    4.2MB

  • MD5

    7b00af1448e6e839175aeb0eab06adf6

  • SHA1

    df5cc4891c89fd363099fdd857acd045beb0b86b

  • SHA256

    cdcf61a9e920752ca1cfacc191934fc1a639e0a05c23d8cd8322afe8817ecffe

  • SHA512

    0cec3257ae6b1efbdbf5845e2d51e4d85fed6a1d4fc9a93aaccfc757c9b4b5a08a0527a7afc866a06b75c5992220280377b581cc36069dcf8b03cc28800a1c89

  • SSDEEP

    98304:cb+bdufkTJIFs7zAbaRDAgwqy5zmlAfptMKMeSw+D6dwYBysZDrhe:WnCfHRc2AfkeSh6ddyADrA

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 35 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 7b00af1448e6e839175aeb0eab06adf6
    .rar
  • DuomiMusic_2011.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    ed83f419402bc3b83a08e3aaf8b5b5b7


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Shortcuts.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inet.dll
    .dll windows:4 windows x86 arch:x86

    3f1149a3053980fe6b461521d2b55a2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsProcess.dll
    .dll windows:4 windows x86 arch:x86

    c9fc7f6df8fedf8f8f1f9f820c072664


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/rfshdktp.dll
    .dll windows:4 windows x86 arch:x86

    042f3c184e7c0923b6325ab1dc09aed7


    Headers

    Imports

    Exports

    Sections

  • DuoMi.exe
    .exe windows:4 windows x86 arch:x86

    1a32d0b85fd03d4e6cad65b0e42f4bf6


    Code Sign

    Headers

    Imports

    Sections

  • LyricSkin/˹.lsk
  • LyricSkin/Զ.lsk
  • LyricSkin/ɫ.lsk
  • Skin/Default.pkg
  • Theme/Theme1.pth
  • Theme/Theme2.pth
  • Theme/Theme3.pth
  • Theme/Theme5.pth
  • Theme/Theme6.pth
  • codec/CoreAVC0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • codec/DCBassSource.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/MPADecoder.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c3c6f028de3173fc15461f0b0aeebdc1


    Headers

    Imports

    Exports

    Sections

  • codec/bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/bass_ape.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/bass_flac.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/codec.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5e75d3e6e2769009a240b6fe0db8f3b6


    Headers

    Imports

    Exports

    Sections

  • codec/codec.xml
  • codec/oggsplitter.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    485d8248e0c2e10bf9794e769ec4c045


    Headers

    Imports

    Exports

    Sections

  • config/cusconfig.ini
  • config/ipsecdef.dat
  • config/sysconfig.ini
  • config/ĬϷ.lsk
  • cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • dmcbar.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    6e5fad27417fdb9be15a1341f21f7da2


    Headers

    Imports

    Exports

    Sections

  • dmcommon.dll
    .dll windows:4 windows x86 arch:x86

    66ece66bc8f32e83104218c6d1d4e6d7


    Headers

    Imports

    Exports

    Sections

  • dmdesklyric.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ba59ed5f9ab98c83ce5c48300faef1b9


    Headers

    Imports

    Exports

    Sections

  • dmdnet.dll
    .dll windows:4 windows x86 arch:x86

    ad2d103f92e0c575e07ff134dec18d89


    Headers

    Imports

    Exports

    Sections

  • dmload.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    77dd876c60a89a324f07d9b7ffc601ee


    Headers

    Imports

    Exports

    Sections

  • dmlyric.dll
    .dll windows:4 windows x86 arch:x86

    c979ea630f85600844f0089a1df3e159


    Headers

    Imports

    Exports

    Sections

  • dmlyricctrl.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e1c36d24768e422560253a1d53fafd92


    Headers

    Imports

    Exports

    Sections

  • dmmediainfo.dll
    .dll windows:4 windows x86 arch:x86

    b15540b5f3dc6586234b25e6aac30c5e


    Headers

    Imports

    Exports

    Sections

  • dmobject.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7dd7c3182d052435489a44fe4f2ac4f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dmplaycore.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5f3f3070504aa2084ca65c0182462fee


    Headers

    Imports

    Exports

    Sections

  • dmplayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e1f061c965833429062905146af0f893


    Headers

    Imports

    Exports

    Sections

  • dmplist.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    dac15d23f3adbfcaf06b61f8ba02b9a5


    Headers

    Imports

    Exports

    Sections

  • dmpnet.dll
    .dll windows:4 windows x86 arch:x86

    5880bde75841012df965c2972605e79e


    Headers

    Imports

    Exports

    Sections

  • dmsearch.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4a563f02720318c0013c2de7377c7af4


    Headers

    Imports

    Exports

    Sections

  • dmsysinfo.dll
    .dll windows:4 windows x86 arch:x86

    ed0009be87deebb89de6bd7398b6c4e1


    Headers

    Imports

    Exports

    Sections

  • dmup.dll
    .dll windows:4 windows x86 arch:x86

    be90ec2e35e33d6c62e24b761df5e837


    Headers

    Imports

    Exports

    Sections

  • drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • npduomi.dll
    .dll windows:4 windows x86 arch:x86

    cafc3d0a740780992e3ab243ce7db543


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • pnetsys.dat
  • raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • resource/Error.html
    .html
  • resource/Loading.html
    .html
  • resource/Player_Buffering.html
    .html
  • resource/Player_Error.html
    .html
  • resource/Player_Loading.html
    .html
  • resource/aac.ico
  • resource/ape.ico
  • resource/default.jpg
    .jpg
  • resource/dmv.ico
  • resource/dpl.ico
  • resource/duomi.ico
  • resource/flac.ico
  • resource/img/error.jpg
    .jpg
  • resource/img/error2.jpg
    .jpg
  • resource/img/load.jpg
    .jpg
  • resource/img/loading_1.jpg
    .jpg
  • resource/img/logo.jpg
    .jpg
  • resource/img/searching.jpg
    .jpg
  • resource/jquery.js
    .js
  • resource/lyricBK.jpg
    .jpg
  • resource/m4a.ico
  • resource/mp3.ico
  • resource/ogg.ico
  • resource/pth.ico
  • resource/wav.ico
  • resource/wma.ico
  • uninst.exe.nsis
  • 新云软件.url
    .url