General

  • Target

    bbbe1ad21debe13574b6acefc3f8e9c8

  • Size

    12.6MB

  • MD5

    bbbe1ad21debe13574b6acefc3f8e9c8

  • SHA1

    0bbc481df75883fec5e99a8b4aedeeb65394e665

  • SHA256

    9216deabbc8208e737e04bbd52a08aa261625b1da2f6646914e8425ec123fe7c

  • SHA512

    bae83ca751646c67df2cf5286f5f4fe9e448852fbe94d80d6e443028ec9eed5abd650de96a2d508c969596fc70879e01fafe9f6cf85019ebe3e814cade9851cf

  • SSDEEP

    393216:ltDMI617R26RXj3xx2MAUMht1l50h/nvr493:fMI61fx8/ht170h/nDU

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • bbbe1ad21debe13574b6acefc3f8e9c8
    .exe windows:5 windows x86 arch:x86

    ff8d8dbb96b7ab762c0ce51911e4d104


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    be2cdd69a77d75f2dbcae5190204885d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/PPAP.exe
    .exe windows:5 windows x86 arch:x86

    bbfdf8708da887867f58223fc4d890b3


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    84d3fae859555f3fa806d87efe60a956


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $COMMONFILES/PPLiveNetwork/$OUTDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    54224128218851b97ad74d04b5915baf


    Code Sign

    Headers

    Imports

    Sections

  • $OUTDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $OUTDIR/PPLive.exe
    .exe windows:5 windows x86 arch:x86

    bbfdf8708da887867f58223fc4d890b3


    Code Sign

    Headers

    Imports

    Sections

  • $OUTDIR/PPLiveU.exe
    .exe windows:5 windows x86 arch:x86

    bbfdf8708da887867f58223fc4d890b3


    Code Sign

    Headers

    Imports

    Sections

  • $OUTDIR/omng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a6e5006b188407994d8c582dbcefc07b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $OUTDIR/ui.dll
    .dll windows:5 windows x86 arch:x86

    d9772e29942b5b6e6f5974b37ba9f6ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $OUTDIR/uilib.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    e589471521ba2bca69e3d39695462c84


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    37c57c99267b241d11cb1f6f96b0ba5e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    55e79df82a11a9c3b96f7ebb44d55181


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    109c032cfbd301a5463d71c5477714b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MngModule.dll
    .dll windows:5 windows x86 arch:x86

    be2cdd69a77d75f2dbcae5190204885d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPAP.exe
    .exe windows:5 windows x86 arch:x86

    bbfdf8708da887867f58223fc4d890b3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPInstallLog.dll
    .dll windows:4 windows x86 arch:x86

    256af4ebe940c94257ae641d926c73e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPLive.exe
    .exe windows:5 windows x86 arch:x86

    bbfdf8708da887867f58223fc4d890b3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PPLiveU.exe
    .exe windows:5 windows x86 arch:x86

    bbfdf8708da887867f58223fc4d890b3


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/PluginInstaller.exe
    .exe windows:4 windows x86 arch:x86

    b4dd414adf75859560fa6af81972f8d5


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/admodule.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    84d3fae859555f3fa806d87efe60a956


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/cmdline.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    fb710db50f09303a58e3e6abf171df01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/crashreporter.exe
    .exe windows:4 windows x86 arch:x86

    54224128218851b97ad74d04b5915baf


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/filepick.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b19a32b747d480a5fa1152cef53c4bf1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    efd9769dbbb5eb5c4b7f43e947c98ae2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/omng.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a6e5006b188407994d8c582dbcefc07b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b0379d55e3f335965f3a537e8e98546c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    edf4943e70bdf926606a4e8b4df57bc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/time.dll
    .dll windows:4 windows x86 arch:x86

    2e3a4d1f132aea64d421c1e936bcc407


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ui.dll
    .dll windows:5 windows x86 arch:x86

    d9772e29942b5b6e6f5974b37ba9f6ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uilib.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    e589471521ba2bca69e3d39695462c84


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/$OUTDIR/PluginInstaller.exe
    .exe windows:4 windows x86 arch:x86

    b4dd414adf75859560fa6af81972f8d5


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/$OUTDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b0379d55e3f335965f3a537e8e98546c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.0.745/$OUTDIR/atl100.dll
    .dll windows:5 windows x86 arch:x86

    0bbf1228f837ecb83ec693b705100bde


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.0.745/$OUTDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    efd9769dbbb5eb5c4b7f43e947c98ae2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.0.745/$OUTDIR/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.0.745/$OUTDIR/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.0.745/$OUTDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    edf4943e70bdf926606a4e8b4df57bc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • components/$OUTDIR/cmdline.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    fb710db50f09303a58e3e6abf171df01


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • components/$OUTDIR/filepick.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    b19a32b747d480a5fa1152cef53c4bf1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • skins/3xgiving/common/checkbox.bmp
  • skins/3xgiving/common/checkbox_checked.bmp
  • skins/3xgiving/common/checkbox_checked_disabled.bmp
  • skins/3xgiving/common/checkbox_checked_down.bmp
  • skins/3xgiving/common/checkbox_checked_hover.bmp
  • skins/3xgiving/common/checkbox_disabled.bmp
  • skins/3xgiving/common/checkbox_down.bmp
  • skins/3xgiving/common/checkbox_hover.bmp
  • skins/classic/common/checkbox.bmp
  • skins/classic/common/checkbox_checked.bmp
  • skins/classic/common/checkbox_checked_disabled.bmp
  • skins/classic/common/checkbox_checked_down.bmp
  • skins/classic/common/checkbox_checked_hover.bmp
  • skins/classic/common/checkbox_disabled.bmp
  • skins/classic/common/checkbox_down.bmp
  • skins/classic/common/checkbox_hover.bmp
  • skins/classic_b/common/checkbox.bmp
  • skins/classic_b/common/checkbox_checked.bmp
  • skins/classic_b/common/checkbox_checked_disabled.bmp
  • skins/classic_b/common/checkbox_checked_down.bmp
  • skins/classic_b/common/checkbox_checked_hover.bmp
  • skins/classic_b/common/checkbox_disabled.bmp
  • skins/classic_b/common/checkbox_down.bmp
  • skins/classic_b/common/checkbox_hover.bmp
  • skins/common/common/checkbox.bmp
  • skins/common/common/checkbox_checked.bmp
  • skins/common/common/checkbox_checked_disabled.bmp
  • skins/common/common/checkbox_checked_down.bmp
  • skins/common/common/checkbox_checked_hover.bmp
  • skins/common/common/checkbox_disabled.bmp
  • skins/common/common/checkbox_down.bmp
  • skins/common/common/checkbox_hover.bmp
  • skins/default/common/checkbox.bmp
  • skins/default/common/checkbox_checked.bmp
  • skins/default/common/checkbox_checked_disabled.bmp
  • skins/default/common/checkbox_checked_down.bmp
  • skins/default/common/checkbox_checked_hover.bmp
  • skins/default/common/checkbox_disabled.bmp
  • skins/default/common/checkbox_down.bmp
  • skins/default/common/checkbox_hover.bmp