General

  • Target

    9b8ffb8278045f4ca39a95c8e41ca078

  • Size

    2.2MB

  • MD5

    9b8ffb8278045f4ca39a95c8e41ca078

  • SHA1

    297c78211396805e4b05f96e86b21efb51644f9c

  • SHA256

    3b79a842b7bad93ca9f64869b996d159ffa3ed2d3a2a4a82b778b050e6450599

  • SHA512

    5dbdb07cefcd5bf79a669ebedec4ba2a04145bf7732508e8a9adeac6ad8aa134197dee89ae30595095a2d1ed239a7a0291685acb653fc22a1e650fedecc3616c

  • SSDEEP

    49152:Ytya0PQLuB/UnCKglUJchqXaPRsolsw4PMZ9oagcTskW02OzjyWJfl0alZ:baRLmUnznJ3Q59fsF02Oz2WJCav

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9b8ffb8278045f4ca39a95c8e41ca078
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Shortcuts.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DuoMi.exe
    .exe windows:4 windows x86 arch:x86

    735e8190d5a74102bab93b328baeb0c0


    Headers

    Imports

    Sections

  • cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • dmcbar.dll
    .dll windows:4 windows x86 arch:x86

    917c6f683feec4fddd35c4c00b5a6346


    Headers

    Imports

    Exports

    Sections

  • dmcommon.dll
    .dll windows:4 windows x86 arch:x86

    531ee947bd4b3971c9eea70936e2b882


    Headers

    Imports

    Exports

    Sections

  • dmdesklyric.dll
    .dll windows:4 windows x86 arch:x86

    b0d9e51ae00ae308636de9eafa7195a7


    Headers

    Imports

    Exports

    Sections

  • dmdnet.dll
    .dll windows:4 windows x86 arch:x86

    47baf220bd4346e5de108aa8b916e8ae


    Headers

    Imports

    Exports

    Sections

  • dmload.dll
    .dll windows:4 windows x86 arch:x86

    505a5206794d59f5319457c42646ee02


    Headers

    Imports

    Exports

    Sections

  • dmlyric.dll
    .dll windows:4 windows x86 arch:x86

    5120a455fe68024f995573a45e137434


    Headers

    Imports

    Exports

    Sections

  • dmlyricctrl.dll
    .dll windows:4 windows x86 arch:x86

    e021d0326724320f4298ff4bf66118f2


    Headers

    Imports

    Exports

    Sections

  • dmplaycore.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f4bb14e966a762e2203948c7db1f24af


    Headers

    Imports

    Exports

    Sections

  • dmplayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d21c9ef1f72905ddce1921ff8c6a3441


    Headers

    Imports

    Exports

    Sections

  • dmplist.dll
    .dll windows:4 windows x86 arch:x86

    356769229621b245ef5b1f885f44175e


    Headers

    Imports

    Exports

    Sections

  • dmpnet.dll
    .dll windows:4 windows x86 arch:x86

    d16687411cd2d3d19cbb395865eacd81


    Headers

    Imports

    Exports

    Sections

  • dmsearch.dll
    .dll windows:4 windows x86 arch:x86

    9ef93763fac2cd8a15150d9f20e97cfc


    Headers

    Imports

    Exports

    Sections

  • dmsysinfo.dll
    .dll windows:4 windows x86 arch:x86

    e4186343c12ec4f35b21bed683e1969c


    Headers

    Imports

    Exports

    Sections

  • dmup.dll
    .dll windows:4 windows x86 arch:x86

    be90ec2e35e33d6c62e24b761df5e837


    Headers

    Imports

    Exports

    Sections

  • drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • pnetsys.dat
  • raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections