Resubmissions

12/08/2024, 08:49

240812-kq9p7atdpq 8

General

  • Target

    omp-launcher-setup.exe

  • Size

    3.9MB

  • MD5

    353740852d5c046c682115bc58e158df

  • SHA1

    e4049780234647a4ac2542f22b17d71691ad91eb

  • SHA256

    c81518963cfdf659828a249f3f251aa692a7bb923eb52c47c8f3ae253a15c5c4

  • SHA512

    5667af09d5ed8d0dad3d399e5c3c7038f4d100a6e97a8f405c6e86468a563e26c4b2739b3f0add18f5071d1430e56fce292e599d8c33a2ccfea1b38a5972397a

  • SSDEEP

    98304:hLiPTFHp5iXUPT77tn8QdTx2J5qMNV4pwB9Ktt1cofEG:hLipHTiET58Qdt2qMApwDofEG

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • omp-launcher-setup.exe
    .exe windows:4 windows x86 arch:x86

    Password: samp

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    Password: samp

    8c45ff8a205d07c8c17066afebcdfc91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    Password: samp

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: samp

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    Password: samp

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    Password: samp

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections

  • omp-launcher.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    Password: samp

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    Password: samp

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    38343d611b1489f0e414939f06a99451


    Headers

    Imports

    Exports

    Sections