General

  • Target

    ba65cbd010ef071142e17cba5e9b6941

  • Size

    4.5MB

  • MD5

    ba65cbd010ef071142e17cba5e9b6941

  • SHA1

    ad8b44f69634040ddea781484ce503052d42b576

  • SHA256

    6a5b9a12214294cdfbf63773431eff5ed35455fc72adfa45902573d5d2688838

  • SHA512

    5c8aec75aed154c11d1651cc8bb6c90edfd4a96f5552e47ce6af680dd66bc57c6d5979074d4a7b4446d0d20caa4c6a84eece67d6dad75bcccb62fd1a201b3943

  • SSDEEP

    98304:xa48Y1rxBxNw2MFVqN39+904/Wj9VcSm/IAWZGH9x1KEfYJ2nwftHVNYB:448YpPxYvqN90p/WMnIxUxwEfYJ2ncrO

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • ba65cbd010ef071142e17cba5e9b6941
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Shortcuts.ini
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • DuoMi.exe
    .exe windows:4 windows x86 arch:x86

    29a7a95d5e2874e6dc34d7a4b0e58065


    Code Sign

    Headers

    Imports

    Sections

  • ErrorNotify.exe
    .exe windows:4 windows x86 arch:x86

    99bd2e48d66077ff7db865ab0ca0bb4a


    Code Sign

    Headers

    Imports

    Sections

  • LyricSkin/˹.lsk
  • LyricSkin/Զ.lsk
  • LyricSkin/ɫ.lsk
  • Skin/Default.pkg
  • Theme/Picture/ͼ0.jpg
    .jpg
  • Theme/Picture/ͼ2.jpg
    .jpg
  • Theme/Theme1.pth
  • Theme/Theme3.pth
  • Theme/Theme5.pth
  • codec/CoreAVC0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • codec/DCBassSource.dll
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/MPADecoder.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c3c6f028de3173fc15461f0b0aeebdc1


    Headers

    Imports

    Exports

    Sections

  • codec/bass.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/bass_ape.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/bass_flac.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • codec/codec.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    65accb3aae4920be3afb32f24c526aad


    Headers

    Imports

    Exports

    Sections

  • codec/codec.xml
  • codec/oggsplitter.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    485d8248e0c2e10bf9794e769ec4c045


    Headers

    Imports

    Exports

    Sections

  • config/cusconfig.ini
  • config/ipsecdef.dat
  • config/sysconfig.ini
  • config/.lsk
  • cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • dmcbar.dll
    .dll windows:4 windows x86 arch:x86

    e789a4cd6d66f6da68dafc09ce31d427


    Headers

    Imports

    Exports

    Sections

  • dmcommon.dll
    .dll windows:4 windows x86 arch:x86

    fba3fd5ed2de530bd7811daa7aeb1891


    Headers

    Imports

    Exports

    Sections

  • dmdeskbox.exe
    .exe windows:4 windows x86 arch:x86

    31cf048ace34cf7e2127bdb61b4c4aeb


    Code Sign

    Headers

    Imports

    Sections

  • dmdeskinfo.exe
    .exe windows:4 windows x86 arch:x86

    ccb6ea2e22d2e962857b057af7ed6e37


    Code Sign

    Headers

    Imports

    Sections

  • dmdesklyric.dll
    .dll windows:4 windows x86 arch:x86

    1f379716d29ebac4188577c76f2a3ea9


    Headers

    Imports

    Exports

    Sections

  • dmdnet.dll
    .dll windows:4 windows x86 arch:x86

    c2c87878a6ee3d893c8c56c0d8609445


    Headers

    Imports

    Exports

    Sections

  • dmload.dll
    .dll windows:4 windows x86 arch:x86

    1c2fc899c2379d88c8ca8452335a0d66


    Headers

    Imports

    Exports

    Sections

  • dmlyric.dll
    .dll windows:4 windows x86 arch:x86

    c064af90937d638315965cd36939b1b5


    Headers

    Imports

    Exports

    Sections

  • dmlyricctrl.dll
    .dll windows:4 windows x86 arch:x86

    a68163b1412fad3ae7f9bcd54b3f8b7c


    Headers

    Imports

    Exports

    Sections

  • dmmediainfo.dll
    .dll windows:4 windows x86 arch:x86

    9c7d31e69f082e075c296357704fd587


    Headers

    Imports

    Exports

    Sections

  • dmobject.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    7dd7c3182d052435489a44fe4f2ac4f2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dmplaycore.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    ae888744bf08f35d1be5e79d5430a352


    Headers

    Imports

    Exports

    Sections

  • dmplayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    3fb5dfd897bcde95709ef429f2f4c567


    Headers

    Imports

    Exports

    Sections

  • dmplist.dll
    .dll windows:4 windows x86 arch:x86

    ed82358fd2ff3b1da0760f9977899213


    Headers

    Imports

    Exports

    Sections

  • dmpnet.dll
    .dll windows:4 windows x86 arch:x86

    d16687411cd2d3d19cbb395865eacd81


    Headers

    Imports

    Exports

    Sections

  • dmsamplesprocess.dll
    .dll windows:4 windows x86 arch:x86

    3e238ba8220da7059e0dc10891a244cc


    Headers

    Imports

    Exports

    Sections

  • dmsearch.dll
    .dll windows:4 windows x86 arch:x86

    d604fb647db58002a4e89ab576fba2e9


    Headers

    Imports

    Exports

    Sections

  • dmsysinfo.dll
    .dll windows:4 windows x86 arch:x86

    e4186343c12ec4f35b21bed683e1969c


    Headers

    Imports

    Exports

    Sections

  • dmup.dll
    .dll windows:4 windows x86 arch:x86

    e9546a7c09d90b39e7ac52964c9189ce


    Headers

    Imports

    Exports

    Sections

  • drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • mfc71.dll
    .dll windows:4 windows x86 arch:x86

    7397fb8b8633dd76aa9cbc7e2e0c24bd


    Headers

    Imports

    Sections

  • msvcp71.dll
    .dll windows:4 windows x86 arch:x86

    5e2398adb60a70c7ab04e7cba75a7983


    Headers

    Imports

    Exports

    Sections

  • msvcr71.dll
    .dll windows:4 windows x86 arch:x86

    7acc8c379c768a1ecd81ec502ff5f33e


    Headers

    Imports

    Exports

    Sections

  • npduomi.dll
    .dll windows:4 windows x86 arch:x86

    cafc3d0a740780992e3ab243ce7db543


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • pnetsys.dat
  • raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • resource/Error.html
    .html
  • resource/Loading.html
    .html
  • resource/Player_Buffering.html
    .html
  • resource/Player_Error.html
    .html
  • resource/Player_Loading.html
    .html
  • resource/aac.ico
  • resource/ape.ico
  • resource/blank.html
  • resource/default.png
    .png
  • resource/dmv.ico
  • resource/dpl.ico
  • resource/duomi.ico
  • resource/flac.ico
  • resource/flv.ico
  • resource/img/error.jpg
    .jpg
  • resource/img/error2.jpg
    .jpg
  • resource/img/load.jpg
    .jpg
  • resource/img/logo.jpg
    .jpg
  • resource/img/mask.png
    .png
  • resource/img/searching.jpg
    .jpg
  • resource/jquery.js
    .js
  • resource/lyricBK.jpg
    .jpg
  • resource/m4a.ico
  • resource/mkv.ico
  • resource/mp3.ico
  • resource/mp4.ico
  • resource/ogg.ico
  • resource/pth.ico
  • resource/rm.ico
  • resource/rmvb.ico
  • resource/wav.ico
  • resource/wma.ico
  • resource/wmv.ico