Resubmissions

11/04/2024, 06:06 UTC

240411-gt1pxagh4y 7

11/04/2024, 05:53 UTC

240411-gllk1sdg28 7

11/04/2024, 05:51 UTC

240411-gj89asgf81 7

11/04/2024, 05:48 UTC

240411-ghl3dadf69 7

11/04/2024, 05:44 UTC

240411-gfgpwagf3y 7

11/04/2024, 05:39 UTC

240411-gcnn1sde52 7

General

  • Target

    Hone - Installer.exe

  • Size

    2.0MB

  • MD5

    67d529ffa7aef6629700ce3a9e990ac2

  • SHA1

    6ba55f541defc22f92473a45d2187848a0d4126a

  • SHA256

    bcc8812a2385f7a4db7d7633eb5ce0770e5cc3b5093873fd3e0a7c239f8daa1d

  • SHA512

    bdda91b0d95292ddae966754c6b3af618b60f4e575033306023db5e923b4a422b7a82bca1974645a15d8631221f7e4cacb399a34737c2c1f1961416c74ae7c64

  • SSDEEP

    49152:6Dr+mxE87vxpsrFpIvPBDurAaMs/Y6NTTCca:6H+4PN+TIvyMZ+O

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Hone - Installer.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DotNetZip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    735e27ae3d7df8c0487e4353d04f6f28


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/OWInstaller.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/OWInstaller.exe.config
    .xml
  • $PLUGINSDIR/OverWolf.Client.CommonUtils.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/SharpRaven.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app/_locales/de/messages.json
  • $PLUGINSDIR/app/_locales/en/messages.json
  • $PLUGINSDIR/app/_locales/es/messages.json
  • $PLUGINSDIR/app/_locales/fr/messages.json
  • $PLUGINSDIR/app/_locales/it/messages.json
  • $PLUGINSDIR/app/_locales/ja/messages.json
  • $PLUGINSDIR/app/_locales/ko/messages.json
  • $PLUGINSDIR/app/_locales/pl/messages.json
  • $PLUGINSDIR/app/_locales/pt/messages.json
  • $PLUGINSDIR/app/_locales/ru/messages.json
  • $PLUGINSDIR/app/_locales/tr/messages.json
  • $PLUGINSDIR/app/_locales/vi/messages.json
  • $PLUGINSDIR/app/_locales/zh-tw/messages.json
  • $PLUGINSDIR/app/_locales/zh/messages.json
  • $PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicMedium.eot
  • $PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicRegular.eot
  • $PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot
  • $PLUGINSDIR/app/cmp.html
    .html .js polyglot
  • $PLUGINSDIR/app/css/styles.min.css
  • $PLUGINSDIR/app/game_detection_database.json
  • $PLUGINSDIR/app/images/big-icon-fallback.png
    .png
  • $PLUGINSDIR/app/images/bottom-arrow-hover.png
    .png
  • $PLUGINSDIR/app/images/bottom-arrow.png
    .png
  • $PLUGINSDIR/app/images/checkbox-checked.png
    .png
  • $PLUGINSDIR/app/images/close-hover.png
    .png
  • $PLUGINSDIR/app/images/close-normal.png
    .png
  • $PLUGINSDIR/app/images/header-logo.png
    .png
  • $PLUGINSDIR/app/images/icon-fallback.png
    .png
  • $PLUGINSDIR/app/images/icon.ico
  • $PLUGINSDIR/app/images/large-logo.png
    .png
  • $PLUGINSDIR/app/images/minimize-hover.png
    .png
  • $PLUGINSDIR/app/images/minimize-normal.png
    .png
  • $PLUGINSDIR/app/images/more-info.png
    .png
  • $PLUGINSDIR/app/images/plus.png
    .png
  • $PLUGINSDIR/app/images/progress-01-overwolf.png
    .png
  • $PLUGINSDIR/app/images/progress-02.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-01.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-02.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-03.png
    .png
  • $PLUGINSDIR/app/images/small-logo.png
    .png
  • $PLUGINSDIR/app/images/tile-fallback.png
    .png
  • $PLUGINSDIR/app/images/v-check.png
    .png
  • $PLUGINSDIR/app/images/welcome-logo.png
    .png
  • $PLUGINSDIR/app/index.html
    .html .js polyglot
  • $PLUGINSDIR/app/js/app.js
    .js
  • $PLUGINSDIR/app/js/block_inputs.js
    .js
  • $PLUGINSDIR/app/js/libs/cmp.bundle.js
    .js
  • $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
    .js
  • $PLUGINSDIR/app/js/models/notifications.js
    .js
  • $PLUGINSDIR/app/js/utils/analytics.js
    .js
  • $PLUGINSDIR/app/js/utils/commands.js
    .js
  • $PLUGINSDIR/app/js/utils/cookies.js
    .js
  • $PLUGINSDIR/app/js/utils/modal-events-delegate.js
    .js
  • $PLUGINSDIR/app/js/utils/strings-loader.js
    .js
  • $PLUGINSDIR/app/js/utils/utils.js
    .js
  • $PLUGINSDIR/app/js/windows/cri/cri-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/cri/template.js
  • $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
  • $PLUGINSDIR/app/js/windows/finish/finish-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/finish/template.js
  • $PLUGINSDIR/app/js/windows/main/main-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/main/template.js
  • $PLUGINSDIR/app/js/windows/modal/modal-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/privacy/template.js
  • $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/progress/template.js
  • $PLUGINSDIR/app/js/windows/settings/settings-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/settings/template.js
  • $PLUGINSDIR/app/js/windows/welcome/template.js
  • $PLUGINSDIR/app/js/windows/welcome/welcome-controller.js
    .js
  • $PLUGINSDIR/app/manifest.json
  • $PLUGINSDIR/app/progress.html
    .js
  • $PLUGINSDIR/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • $PLUGINSDIR/nsis7z64.dll
    .dll windows:6 windows x64 arch:x64

    dd7cd06a0b2436c11533a6ea17d01100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/partner-custom-asset.png
    .png
  • $PLUGINSDIR/uac.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/utils.dll
    .dll windows:5 windows x86 arch:x86

    d1df4ecc5e6dee090f109d6f03e8eed9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.