General

  • Target

    Thunderstore Mod Manager - Installer.exe

  • Size

    2.0MB

  • MD5

    25afa9bfeb6e54ee3b0a0deeff3a0c68

  • SHA1

    d6609d46b86baa0a09af423fae555300d77f59da

  • SHA256

    1ac0b67dac59ddb5fd032ff40c979ba4fbd9a8040ca6922bda5c05f5dcb49b42

  • SHA512

    067dcb3434f593f49d2323f390d3e625ace888978e1b5dcfa260c3748d0a1593422a7866e0f583b587c87e7c7f3173e051920e1822cac282bfa457b29e10ccec

  • SSDEEP

    49152:9SlBxE87vxpsrFpIvxqMsaMwgs3W/0s9YdBA0c:9SRPN+TIvxqMshwv3W/0NDA0

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Thunderstore Mod Manager - Installer.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DotNetZip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    735e27ae3d7df8c0487e4353d04f6f28


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/OWInstaller.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/OWInstaller.exe.config
    .xml
  • $PLUGINSDIR/OverWolf.Client.CommonUtils.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/SharpRaven.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app/_locales/de/messages.json
  • $PLUGINSDIR/app/_locales/en/messages.json
  • $PLUGINSDIR/app/_locales/es/messages.json
  • $PLUGINSDIR/app/_locales/fr/messages.json
  • $PLUGINSDIR/app/_locales/it/messages.json
  • $PLUGINSDIR/app/_locales/ja/messages.json
  • $PLUGINSDIR/app/_locales/ko/messages.json
  • $PLUGINSDIR/app/_locales/pl/messages.json
  • $PLUGINSDIR/app/_locales/pt/messages.json
  • $PLUGINSDIR/app/_locales/ru/messages.json
  • $PLUGINSDIR/app/_locales/tr/messages.json
  • $PLUGINSDIR/app/_locales/vi/messages.json
  • $PLUGINSDIR/app/_locales/zh-tw/messages.json
  • $PLUGINSDIR/app/_locales/zh/messages.json
  • $PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicMedium.eot
  • $PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicRegular.eot
  • $PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot
  • $PLUGINSDIR/app/cmp.html
    .html .js polyglot
  • $PLUGINSDIR/app/css/styles.min.css
  • $PLUGINSDIR/app/images/big-icon-fallback.png
    .png
  • $PLUGINSDIR/app/images/bottom-arrow-hover.png
    .png
  • $PLUGINSDIR/app/images/bottom-arrow.png
    .png
  • $PLUGINSDIR/app/images/checkbox-checked.png
    .png
  • $PLUGINSDIR/app/images/close-hover.png
    .png
  • $PLUGINSDIR/app/images/close-normal.png
    .png
  • $PLUGINSDIR/app/images/header-logo.png
    .png
  • $PLUGINSDIR/app/images/icon-fallback.png
    .png
  • $PLUGINSDIR/app/images/icon.ico
  • $PLUGINSDIR/app/images/large-logo.png
    .png
  • $PLUGINSDIR/app/images/minimize-hover.png
    .png
  • $PLUGINSDIR/app/images/minimize-normal.png
    .png
  • $PLUGINSDIR/app/images/more-info.png
    .png
  • $PLUGINSDIR/app/images/plus.png
    .png
  • $PLUGINSDIR/app/images/progress-01-overwolf.png
    .png
  • $PLUGINSDIR/app/images/progress-02.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-01.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-02.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-03.png
    .png
  • $PLUGINSDIR/app/images/small-logo.png
    .png
  • $PLUGINSDIR/app/images/tile-fallback.png
    .png
  • $PLUGINSDIR/app/images/v-check.png
    .png
  • $PLUGINSDIR/app/images/welcome-logo.png
    .png
  • $PLUGINSDIR/app/index.html
    .html .js polyglot
  • $PLUGINSDIR/app/js/app.js
    .js
  • $PLUGINSDIR/app/js/block_inputs.js
    .js
  • $PLUGINSDIR/app/js/libs/cmp.bundle.js
    .js
  • $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
    .js
  • $PLUGINSDIR/app/js/libs/mixpanel.js
    .js
  • $PLUGINSDIR/app/js/models/notifications.js
    .js
  • $PLUGINSDIR/app/js/utils/analytics.js
    .js
  • $PLUGINSDIR/app/js/utils/commands.js
    .js
  • $PLUGINSDIR/app/js/utils/cookies.js
    .js
  • $PLUGINSDIR/app/js/utils/modal-events-delegate.js
    .js
  • $PLUGINSDIR/app/js/utils/strings-loader.js
    .js
  • $PLUGINSDIR/app/js/utils/utils.js
    .js
  • $PLUGINSDIR/app/js/windows/cri/cri-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/cri/template.js
  • $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
  • $PLUGINSDIR/app/js/windows/finish/finish-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/finish/template.js
  • $PLUGINSDIR/app/js/windows/main/main-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/main/template.js
  • $PLUGINSDIR/app/js/windows/modal/modal-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/privacy/template.js
  • $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/progress/template.js
  • $PLUGINSDIR/app/js/windows/settings/settings-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/settings/template.js
  • $PLUGINSDIR/app/js/windows/welcome/template.js
  • $PLUGINSDIR/app/js/windows/welcome/welcome-controller.js
    .js
  • $PLUGINSDIR/app/manifest.json
  • $PLUGINSDIR/app/progress.html
    .html .js polyglot
  • $PLUGINSDIR/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $PLUGINSDIR/nsis7z64.dll
    .dll windows:6 windows x64 arch:x64

    dd7cd06a0b2436c11533a6ea17d01100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uac.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/utils.dll
    .dll windows:5 windows x86 arch:x86

    d1df4ecc5e6dee090f109d6f03e8eed9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections