General

  • Target

    c03193023eace953240ee3c701663439

  • Size

    9.8MB

  • MD5

    c03193023eace953240ee3c701663439

  • SHA1

    2a594fccda911da15dc398ce15284c81fd2d9880

  • SHA256

    93df2172481667f95a4526960a6ed307ba863ea6a195b69076476966dc0bcc4a

  • SHA512

    073522765ad9ca5a7859923e7be3a36db8fcda7f67cf355560afb06b755fa424e0c78996695584d885676093755d96dace764e8c44bdf0e95af3676b195fd29d

  • SSDEEP

    196608:Om0h5AWfVwO+DoXy2vidF1R2qHBe3Nlg5VvTSwnHu0qD5rr/oL8WFWsn2wlzSvs:B0hiCC0s7RkNlcVvTJxK/oL86l3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c03193023eace953240ee3c701663439
    .rar
  • dudu-v1.1.15.23.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • data/IMUtility.dll
    .dll windows:4 windows x86 arch:x86

    fb6e4328609b29d515f83cc19043ac69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/Microsoft.VC80.CRT.manifest
    .xml
  • data/Microsoft.VC80.MFC.manifest
    .xml
  • data/RICHED20.DLL
    .dll windows:4 windows x86 arch:x86

    19ebd6cf4c9e495eb30559a0feaea718


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/checker.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a3463a11908dad318ddc9e2ae0843b22


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/checker.exe
    .exe windows:4 windows x86 arch:x86

    75d504919b9bc95f3c2637f44cec8ba2


    Code Sign

    Headers

    Imports

    Sections

  • data/data/ChannelGameList.xml
    .xml
  • data/data/CollectGames.xml
    .xml
  • data/data/DefaultChannelComment.txt
  • data/data/FileTransSecurity.xml
    .xml
  • data/data/Flock.xml
    .xml
  • data/data/GamesList.xml
    .xml
  • data/data/StrParser.xml
    .xml
  • data/data/animationface.xml
    .xml
  • data/data/citybase.tbl
  • data/data/headmanager.xml
    .xml
  • data/data/provincebase.tbl
  • data/data/regionbase.tbl
  • data/data/validflash.xml
    .xml
  • data/dudu.exe
    .exe windows:4 windows x86 arch:x86

    563a1b5ac869b76bdd48ccfff406ef6e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/iceclientlib.dll
    .dll windows:4 windows x86 arch:x86

    31d9cdf80e377265fa9edfcd0b213581


    Headers

    Imports

    Exports

    Sections

  • data/imsetup.ini
  • data/imupdate.exe
    .exe windows:4 windows x86 arch:x86

    736fa2417aeb84ab6d7878995a58e7ed


    Code Sign

    Headers

    Imports

    Sections

  • data/magicflash.exe
    .exe windows:4 windows x86 arch:x86

    b9708a17d598d47ba64a7e2ec45e2720


    Code Sign

    Headers

    Imports

    Sections

  • data/mfc80u.dll
    .dll windows:4 windows x86 arch:x86

    ec3a3e73c915b29faaecfea40905d0c8


    Code Sign

    Headers

    Imports

    Sections

  • data/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c85d8396f1ce855bc219450c4b2c265b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/msvcp80.dll
    .dll windows:4 windows x86 arch:x86

    9fb682fe34f5d965faf4cf424fa6c000


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/msvcr80.dll
    .dll windows:4 windows x86 arch:x86

    8eb98c77a1ada89df5027bd5bf01c2f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/rcBigHeadImage.dll
    .dll windows:4 windows x86 arch:x86

    7c89263619d2d7957f0c8ac998f4d14c


    Code Sign

    Headers

    Imports

    Sections

  • data/rcDlgImage.dll
    .dll windows:4 windows x86 arch:x86

    9704c6413403804e79b3afc92396146e


    Code Sign

    Headers

    Imports

    Sections

  • data/rcFace.dll
    .dll windows:4 windows x86 arch:x86

    7c89263619d2d7957f0c8ac998f4d14c


    Code Sign

    Headers

    Imports

    Sections

  • data/rcHeadImage.dll
    .dll windows:4 windows x86 arch:x86

    7c89263619d2d7957f0c8ac998f4d14c


    Code Sign

    Headers

    Imports

    Sections

  • data/rcImage.dll
    .dll windows:4 windows x86 arch:x86

    7c89263619d2d7957f0c8ac998f4d14c


    Code Sign

    Headers

    Imports

    Sections

  • data/skin/defaultskin/CommonDlgSkinPos.ini
  • data/skin/defaultskin/SkinPos.ini
  • data/skin/defaultskin/color.ini
  • data/skin/defaultskin/rcSkin.dll
    .dll windows:4 windows x86 arch:x86

    9704c6413403804e79b3afc92396146e


    Headers

    Imports

    Sections

  • data/sound/curtains_change.wav
  • data/sound/flock_msg.WAV
  • data/sound/friend_msg.wav
  • data/sound/friend_online.wav
  • data/sound/shark.wav
  • data/sound/sys_msg.wav
  • data/sound/vedio_request.wav
  • data/sound/vedio_wait_accept.wav
  • data/sound/voicechannel_inout.wav
  • data/sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    bf2a4dfea3f92bc6ae2f4f3efb14aabe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/tinyxml.dll
    .dll windows:4 windows x86 arch:x86

    c0a5501fd7432eacb824bae6a90c46b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/zCanvas.dll
    .dll windows:4 windows x86 arch:x86

    068fc0147fb7a5694d07ad2756f6abef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/zP2PICEEngine.dll
    .dll windows:4 windows x86 arch:x86

    016b36c394c4f9b299af66bbcf836da5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/zlib.dll
    .dll windows:4 windows x86 arch:x86

    c81559f6c79b672ea2e421db73f8c9e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/ztImage.dll
    .dll windows:4 windows x86 arch:x86

    c94634649f1d2f8bd7010fdf1d030379


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/ztP2PFileTrans.dll
    .dll windows:4 windows x86 arch:x86

    1d9662154e60952d974232e20b43f108


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/ztSystem.dll
    .dll windows:4 windows x86 arch:x86

    4a98e0401779d338af23cea8249ce493


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • data/ztVoiceClientEx.dll
    .dll windows:4 windows x86 arch:x86

    45898a0338870418128468ef371f83cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninst-dudu.exe.nsis
  • 新云软件.url
    .url