General

  • Target

    c342e54f62ac7eb6e03b71b37aa3a572

  • Size

    3.9MB

  • MD5

    c342e54f62ac7eb6e03b71b37aa3a572

  • SHA1

    910f41225b277090e4f429c632a7e69fb2a4215a

  • SHA256

    90bb2e0291198ba4ee5affd69452204f890355f8d8e1f710c904e6c6d9541ba1

  • SHA512

    24a42c10c828fc285f018cd08e06fc107f00cab025ce7a03ee225fe93ea8d79588288ac2168c0be4006f24853f6077b39677b8fbf50dd09ac37ac0a82101738e

  • SSDEEP

    98304:rqKGUH+m74CnPV6R3pvNKwGRm0xSZ4gkcO:rqKP02PV6RBNKwGRmp0

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • c342e54f62ac7eb6e03b71b37aa3a572
    .rar
  • PPStream/@绿化工具.exe
    .exe windows:4 windows x86 arch:x86

    1c042238f43557c055fca8642de8a074


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ButtonEvent.dll
    .dll windows:4 windows x86 arch:x86

    0ece15e7d9bb35972aec701f46192460


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/linker.dll
    .dll windows:4 windows x86 arch:x86

    5b9be84907034b8f0152e51177ceafc3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/www.greendown.cn.ini
  • PPStream/Codec/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/14_43260.dll
    .dll windows:4 windows x86 arch:x86

    10cc1c83f991b066cba98aa471df4e60


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/28_83260.dll
    .dll windows:4 windows x86 arch:x86

    3fde72e769c2ba8f88c009f3828dd015


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/atrc.dll
    .dll windows:4 windows x86 arch:x86

    5132cde9ac8899a69f40dfaacc320c4d


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/cook.dll
    .dll windows:4 windows x86 arch:x86

    7186ef18b8145b9efacd73914d40cee0


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/dnet3260.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • PPStream/Codec/real/Codecs/drv2.dll
    .dll windows:4 windows x86 arch:x86

    44586b56c5dcc55b19268bed59258786


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/drvc.dll
    .dll windows:4 windows x86 arch:x86

    5d841dc9603dda4e7058b842c1dedbfc


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/raac.dll
    .dll windows:4 windows x86 arch:x86

    2569b16af6a5e82c06ef6aed87f5e148


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/ralf.dll
    .dll windows:4 windows x86 arch:x86

    ca3cf2dadfa161c51320288930144294


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/real/Codecs/sipr.dll
    .dll windows:4 windows x86 arch:x86

    ab44f666347fdcd438ddb88f10cba053


    Headers

    Imports

    Exports

    Sections

  • PPStream/Codec/rmsplt.ax
    .dll regsvr32 windows:4 windows x86 arch:x86

    80dea1004f86b2c7f67c701dee162a1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/FlashPlayDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    a6244b6226ff02159632e5c5da7f0298


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/Livenet.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4347415a1e4449a881e25d83556699da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/Livenet2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    31b31b20544e61d370f7d641886293dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/PPStream.exe
    .exe windows:4 windows x86 arch:x86

    89506a2e1fe9b08b84632facc2ab099c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/PSNetwork.dll
    .dll windows:4 windows x86 arch:x86

    8b02f1a13b2819c3f999f3a00b4c5678


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/PowerList.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    48fb27c637582bc0bae9765a56087cc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/PowerPlayer.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    9b4bdf6d55e6733b4cd9c1cf836dd7e0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/Vista.ssk
  • PPStream/Vodnet.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    65a194156534bdedfa1ef4bf9fbf3a13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/assoc.ini
  • PPStream/fds.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    5fd2b718848632449c370b4eb8425dda


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/msvcp60.dll
    .dll windows:4 windows x86 arch:x86

    c428a646f4c250be02cf420ab15d34b4


    Headers

    Imports

    Exports

    Sections

  • PPStream/pncrt.dll
    .dll windows:4 windows x86 arch:x86

    828907b7a8ec04c9c4031e40ef2f76ec


    Headers

    Imports

    Exports

    Sections

  • PPStream/pp2play.dll
    .dll windows:4 windows x86 arch:x86

    fd36a18f229a484ad0dc09e33d5f98c7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/ppsimage.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    e8799d0d7aafb9bc0a77ae58ba2f70a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/ppssg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    0a9a13429a81356a54ac401111548cae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/psclg.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4aaffde4d28a121ffd7a440bf01ff5f9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/vodres.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    c5ae636bdaddbfa5d199d627301f359d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • PPStream/whatsnew.txt
  • PPStream/新云软件.url
    .url