General

  • Target

    7d552c4ea02dc537ea1fbc6349fce970N.exe

  • Size

    4.4MB

  • MD5

    7d552c4ea02dc537ea1fbc6349fce970

  • SHA1

    d9269f5cfc9017ab1b0d4e5155984358b609f5f0

  • SHA256

    2c2882805a21d74bccfc900ff63a8459725ae359a4b00729f729b9b30a0faef8

  • SHA512

    1139546e7df7bde5f3e7801e1a85afb3579c4bf72d213d52c302db4db8df6edf00a4055624bbef6057be37aedd82529ed1aed82a1254fb7ae8ddc13d0cbc5d8a

  • SSDEEP

    98304:PKIHi3I6EpJvF2+OmLhV+/seqbrAkbsZQOXcxlw8mZLV:iIHiiJ9drLhreqbrA+sZQacxOL7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 5 IoCs

Files

  • 7d552c4ea02dc537ea1fbc6349fce970N.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $1
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    57354bdeea3dfae6e948101add87501a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:5 windows x86 arch:x86

    ffd4412e307ea3d6ae2310c454bc8fc7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5d31a4a9e83c0a8e38bab1f57d28402c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $APPDATA/$APPDATA/kuwodata/KWMUSIC/Conf/p2pconf/setup.xml
    .xml
  • $APPDATA/kuwodata/KWMUSIC/Res/cache/DOWNLOAD_ARTISTPIC/49FF334D.dat
    .jpg
  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    472def3d6dc5d4ffe27376a831b4d49b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:5 windows x86 arch:x86

    948b8bae60b459524040676d50b6a578


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KwMusicNsis.dll
    .dll windows:5 windows x86 arch:x86

    f7dc2c53a0e6c4733e555ca33166f6ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellLink.dll
    .dll windows:5 windows x86 arch:x86

    50112fdd20200a51dbedeae8f1f33cdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/SimpleSC.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsisSlideshowx.dll
    .dll windows:5 windows x86 arch:x86

    d2325c6257e48d1bd19cd17c53b9f01d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/KWMUSIC/BindConfig.ini
  • $TEMP/KWMUSIC/DownloadUpdate.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Base64.dll
    .dll windows:4 windows x86 arch:x86

    472def3d6dc5d4ffe27376a831b4d49b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExecWaitEx.dll
    .dll windows:5 windows x86 arch:x86

    54b9abc6c68871f258abd4b5591459db


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KuWoNsis_new.dll
    .dll windows:5 windows x86 arch:x86

    948b8bae60b459524040676d50b6a578


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    5bdcdde5acd7b395f3f3d19ebbb8c6cd


    Headers

    Imports

    Exports

    Sections

  • $TEMP/KWMUSIC/mylk.dat
  • $WINDIR/KwYlx.dat
  • KwMusic.exe
    .exe windows:5 windows x86 arch:x86

    579eb69a9d42f824590130a37d3931e6


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.VC90.CRT.manifest
  • bin/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    c64cac39044626770353879245ea25e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CKuwoPlayer.dll
    .dll windows:5 windows x86 arch:x86

    e8dde7ca3f8e8aaa6e2d36e7ed434487


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CWmpPlayer.dll
    .dll windows:5 windows x86 arch:x86

    45a38a9f4cf88d5fef40567da57cba67


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/CoreAVC0.ax
    .dll regsvr32 windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • bin/DshowPlayer.dll
    .dll windows:5 windows x86 arch:x86

    61d9f42845cb3ca2b168cd8c87458a92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/DuiLib.dll
    .dll windows:5 windows x86 arch:x86

    013de4afd9839cc98c18533bb9c52f2b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/DumpReport.exe
    .exe windows:5 windows x86 arch:x86

    abc0c305e58a249f638e52725a700105


    Code Sign

    Headers

    Imports

    Sections

  • bin/Encode.exe
    .exe windows:5 windows x86 arch:x86

    ca135ef683fd74cc8427303c3b7646e8


    Code Sign

    Headers

    Imports

    Sections

  • bin/IEProxy.dll
    .dll windows:5 windows x86 arch:x86

    bd99bff4efa8de34c3c8501e4abaaecd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/IESandBox.exe
    .exe windows:5 windows x86 arch:x86

    c28b545f48538288f670e8a9811d23b3


    Code Sign

    Headers

    Imports

    Sections

  • bin/KuwoDaemon.apk
    .apk android

    cn.kuwo.service


  • bin/KuwoSyncMobile.dll
    .dll windows:5 windows x86 arch:x86

    0eb21a2c4c96b992395ac3fc1f55c99b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwConfig.exe
    .exe windows:5 windows x86 arch:x86

    297e09fdcff7fa05b9b9c2a26c0b0dca


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwDPGame.exe
    .exe windows:5 windows x86 arch:x86

    3028465870c5f98fa086facbb6a57a64


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwDataDef.dll
    .dll windows:5 windows x86 arch:x86

    803e420aeb07a995f5f3fab1f1485f70


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwHttp.dll
    .dll windows:5 windows x86 arch:x86

    1089746ef651a6850f1cfab916aae22d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwHttpRequestMgr.dll
    .dll windows:5 windows x86 arch:x86

    79a777c00a5666f12e3e54c20868f2a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwInfos.exe
    .exe windows:5 windows x86 arch:x86

    deb15741e8726d12107a7895c603acca


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwLib.dll
    .dll windows:5 windows x86 arch:x86

    5a33c4a75585d56f74771d8ecb39a9c7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwLog.dll
    .dll windows:5 windows x86 arch:x86

    1acc1595a7b8edc4c725b665c4d8f34b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMV.dll
    .dll windows:5 windows x86 arch:x86

    8fb5404fa0abb9f5a188afa990f21c71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModAppStore.dll
    .dll windows:5 windows x86 arch:x86

    1eb692483cdb4e475c7fad23abe1cbcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModConfig.dll
    .dll windows:5 windows x86 arch:x86

    ef68062927a4bc64df6a62b42e0d2be0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModDownload.dll
    .dll windows:5 windows x86 arch:x86

    3708b18a6a0d075c5a4c9a29993f810b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModGameEntry.dll
    .dll windows:5 windows x86 arch:x86

    eeb9d77441fcaefa6d977e27242e283d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLocalMusic.dll
    .dll windows:5 windows x86 arch:x86

    406ea77c8176fd87d03b34703f5b6e2d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyric.dll
    .dll windows:5 windows x86 arch:x86

    2115f6bbfacdcfa03f4f4864c8fec5e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModLyricShow.dll
    .dll windows:5 windows x86 arch:x86

    2e4b7d41f22a7f9ad7aa190e40687451


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModNetSong.dll
    .dll windows:5 windows x86 arch:x86

    c089bbe1673e441e9b4a753cb868f69d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModPlaylist.dll
    .dll windows:5 windows x86 arch:x86

    e06cf9e2db0c53b257e06440932b8cbb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSayHello.dll
    .dll windows:5 windows x86 arch:x86

    ac6bbbb9a68840400e3a5fe504f05ec2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSkinManage.dll
    .dll windows:5 windows x86 arch:x86

    777f43159b0e76661eab39924f3d9178


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModSynList.dll
    .dll windows:5 windows x86 arch:x86

    e6e7b7241cc12919ed2984d90000cff9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModUpdateWeb.dll
    .dll windows:5 windows x86 arch:x86

    c779abf203ecb80319367532085bb6e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwModUser.dll
    .dll windows:5 windows x86 arch:x86

    9b3495d0acde12729f1ed2abd04c8034


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwMusic.exe
    .exe windows:5 windows x86 arch:x86

    633cc198d25099da91e642987d84efeb


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwMusicCore.dll
    .dll windows:5 windows x86 arch:x86

    16463d765261280413b63566a81376ca


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwRecoSong.dll
    .dll windows:5 windows x86 arch:x86

    e96354da883300a3da83d70c47843823


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwService.exe
    .exe windows:5 windows x86 arch:x86

    a646e07b74960ce8efbda6546fe616e5


    Code Sign

    Headers

    Imports

    Sections

  • bin/KwServiceProxy.dll
    .dll windows:5 windows x86 arch:x86

    675be03048af7dec9c74fe459503da42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwSongCache.dll
    .dll windows:5 windows x86 arch:x86

    11db4c24f962f1421fc670881266043a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwTagLib.dll
    .dll windows:5 windows x86 arch:x86

    0f2b449cf73353cf77465d8a7aaf1eff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/KwUpdate.dll
    .dll windows:5 windows x86 arch:x86

    489caecb67c857143e128cdf995f6b0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/MatroskaSplitter.ax
    .dll regsvr32 windows:5 windows x86 arch:x86

    0bd4fc025f75aa9f6f3a1cba9099b59c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/MediaInfo.dll
    .dll windows:5 windows x86 arch:x86

    c43a2db5587c1773ba58284595b92fb6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/Microsoft.VC90.CRT.manifest
  • bin/Module.xml
    .xml
  • bin/MpaDecFilter.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    49fe25334afea175223d3ae146a8e0b9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/PlayerCore.dll
    .dll windows:5 windows x86 arch:x86

    eae8323f394037fc0c19c8e5258a3730


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/ReconEngine.exe
    .exe windows:5 windows x86 arch:x86

    d51054570362be4347d7eadfdb252ba4


    Code Sign

    Headers

    Imports

    Sections

  • bin/ShellDl.exe
    .exe windows:5 windows x86 arch:x86

    fa0504b29c44dc5bc171688bab0b2c3a


    Code Sign

    Headers

    Imports

    Sections

  • bin/UIAvMgr.dll
    .dll windows:5 windows x86 arch:x86

    9915a9f679441dca9e89770b44acd444


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIDeskLyric.dll
    .dll windows:5 windows x86 arch:x86

    70a371cdb3ece30659676825f27f8a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIDownload.dll
    .dll windows:5 windows x86 arch:x86

    2e69e43ac02200a4be985ba215b502df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIMiniPanel.dll
    .dll windows:5 windows x86 arch:x86

    f12c96ead0417cc36d52d0c4a3ef95fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINetSong.dll
    .dll windows:5 windows x86 arch:x86

    dab7d86ea86e3b08610c78e001ff6845


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UINowPlaying.dll
    .dll windows:5 windows x86 arch:x86

    7367a3b0f05fceec4e5e0c67b55e972e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPlayControl.dll
    .dll windows:5 windows x86 arch:x86

    4dd2e3754f474149097d356f90a679ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/UIPlaylist.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • bin/mylkx.dat
  • bin/plugin/Microsoft.VC90.CRT.manifest
  • readme.txt