General

  • Target

    48fb197c4729a0355dd805266a2fb4dba95343d95a74ec26568b61953195d9ad

  • Size

    2.0MB

  • MD5

    eb45d73ec888366519cadddd38c6e79e

  • SHA1

    0ad5d84271e0d44f6bcadda6a8b442e424a85823

  • SHA256

    48fb197c4729a0355dd805266a2fb4dba95343d95a74ec26568b61953195d9ad

  • SHA512

    eb0eecb64598d703a2c77e393fd435e308c2d5c11c1af73b710783d06720f4b6577259ef6e6395d4d408424f50d078a61c0cec0b931707e534b3146e06753695

  • SSDEEP

    49152:L1Rce6xE87vxpsrFpIvgV7Rlh4TrAzPYnsBYkjLRUcz:Lj4PN+TIvWOywn/4CW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 48fb197c4729a0355dd805266a2fb4dba95343d95a74ec26568b61953195d9ad
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/DotNetZip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    735e27ae3d7df8c0487e4353d04f6f28


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/OWInstaller.exe
    .exe windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/OWInstaller.exe.config
    .xml
  • $PLUGINSDIR/OverWolf.Client.CommonUtils.dll
    .dll windows:4 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • $PLUGINSDIR/SharpRaven.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    e1c0bd3d5b9f3f5cec7ea773ff66ac6e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app/_locales/de/messages.json
  • $PLUGINSDIR/app/_locales/en/messages.json
  • $PLUGINSDIR/app/_locales/es/messages.json
  • $PLUGINSDIR/app/_locales/fr/messages.json
  • $PLUGINSDIR/app/_locales/it/messages.json
  • $PLUGINSDIR/app/_locales/ja/messages.json
  • $PLUGINSDIR/app/_locales/ko/messages.json
  • $PLUGINSDIR/app/_locales/pl/messages.json
  • $PLUGINSDIR/app/_locales/pt/messages.json
  • $PLUGINSDIR/app/_locales/ru/messages.json
  • $PLUGINSDIR/app/_locales/tr/messages.json
  • $PLUGINSDIR/app/_locales/vi/messages.json
  • $PLUGINSDIR/app/_locales/zh/messages.json
  • $PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicMedium.eot
  • $PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicRegular.eot
  • $PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot
  • $PLUGINSDIR/app/cmp.html
    .html .js polyglot
  • $PLUGINSDIR/app/css/styles.min.css
  • $PLUGINSDIR/app/images/big-icon-fallback.png
    .png
  • $PLUGINSDIR/app/images/bottom-arrow-hover.png
    .png
  • $PLUGINSDIR/app/images/bottom-arrow.png
    .png
  • $PLUGINSDIR/app/images/checkbox-checked.png
    .png
  • $PLUGINSDIR/app/images/close-hover.png
    .png
  • $PLUGINSDIR/app/images/close-normal.png
    .png
  • $PLUGINSDIR/app/images/header-logo.png
    .png
  • $PLUGINSDIR/app/images/icon-fallback.png
    .png
  • $PLUGINSDIR/app/images/icon.ico
  • $PLUGINSDIR/app/images/large-logo.png
    .png
  • $PLUGINSDIR/app/images/minimize-hover.png
    .png
  • $PLUGINSDIR/app/images/minimize-normal.png
    .png
  • $PLUGINSDIR/app/images/more-info.png
    .png
  • $PLUGINSDIR/app/images/plus.png
    .png
  • $PLUGINSDIR/app/images/progress-01-overwolf.png
    .png
  • $PLUGINSDIR/app/images/progress-02.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-01.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-02.png
    .png
  • $PLUGINSDIR/app/images/progress-app-image-03.png
    .png
  • $PLUGINSDIR/app/images/small-logo.png
    .png
  • $PLUGINSDIR/app/images/tile-fallback.png
    .png
  • $PLUGINSDIR/app/images/v-check.png
    .png
  • $PLUGINSDIR/app/images/welcome-logo.png
    .png
  • $PLUGINSDIR/app/index.html
    .html .js polyglot
  • $PLUGINSDIR/app/js/app.js
    .js
  • $PLUGINSDIR/app/js/block_inputs.js
    .js
  • $PLUGINSDIR/app/js/libs/cmp.bundle.js
    .js
  • $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
    .js
  • $PLUGINSDIR/app/js/libs/mixpanel.js
    .js
  • $PLUGINSDIR/app/js/models/notifications.js
    .js
  • $PLUGINSDIR/app/js/utils/analytics.js
    .js
  • $PLUGINSDIR/app/js/utils/commands.js
    .js
  • $PLUGINSDIR/app/js/utils/cookies.js
    .js
  • $PLUGINSDIR/app/js/utils/modal-events-delegate.js
    .js
  • $PLUGINSDIR/app/js/utils/strings-loader.js
    .js
  • $PLUGINSDIR/app/js/utils/utils.js
    .js
  • $PLUGINSDIR/app/js/windows/cri/cri-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/cri/template.js
  • $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
  • $PLUGINSDIR/app/js/windows/finish/finish-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/finish/template.js
  • $PLUGINSDIR/app/js/windows/main/main-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/main/template.js
  • $PLUGINSDIR/app/js/windows/modal/modal-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/privacy/template.js
  • $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/progress/template.js
  • $PLUGINSDIR/app/js/windows/settings/settings-controller.js
    .js
  • $PLUGINSDIR/app/js/windows/settings/template.js
  • $PLUGINSDIR/app/js/windows/welcome/template.js
  • $PLUGINSDIR/app/js/windows/welcome/welcome-controller.js
    .js
  • $PLUGINSDIR/app/manifest.json
  • $PLUGINSDIR/app/progress.html
    .html .js polyglot
  • $PLUGINSDIR/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z64.dll
    .dll windows:6 windows x64 arch:x64

    dd7cd06a0b2436c11533a6ea17d01100


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/uac.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/utils.dll
    .dll windows:5 windows x86 arch:x86

    d1df4ecc5e6dee090f109d6f03e8eed9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.