Omsi-Helpmaker[.]zip

Resubmissions

27/09/2024, 17:10

240927-vpn27svdqa 3

27/09/2024, 17:09

240927-vpetjavdpc 3

Sharing

Copy URL Twitter E-mail

General

Target

Omsi-Helpmaker.zip
Size

1.7MB
MD5

f8c8678d021ae1fdcee83ce63e6ff8d8
SHA1

518474cbc5a3e63ca2db4967dce4b73406706797
SHA256

b36f0ca0c895c33757502d3626f4a78e692283bab85c59f7c184d6823157cd15
SHA512

d40e3c42b2cf92be07f6c95da227480249c711a64302c4afc9537eb56eb43e66a8b41e6ac7aa8239b45ac052d88205578a1a59cc9b58b637f52f6f67cf47a440
SSDEEP

24576:4qqKbSO44Ywsl0lIqIOKcHWBXxjg6Qs6vLa7hpcC3ABT+TFes:zXbS34YwE0KNeWdNx6vsc2Zpes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Omsi-Helpmaker/Omsi-Helpmaker.exe

Files

Omsi-Helpmaker.zip
.zip
Omsi-Helpmaker/Language/English.txt
Omsi-Helpmaker/Language/German.txt
Omsi-Helpmaker/Omsi-Helpmaker.cfg
Omsi-Helpmaker/Omsi-Helpmaker.exe
.exe windows:4 windows x86 arch:x86

829c4ab4d4c38f3893d63de997983f42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
wcsstr
_wcsicmp
setlocale
swscanf
_wcsnicmp
wcsncmp
wcsncpy
_wcsdup
free
_isnan
memmove
wcslen
wcscpy
wcscat
wcscmp
strlen
strcpy
strcat
memcmp
floor
ceil
_CIacos
_CIfmod
tolower
_wfopen
longjmp
_setjmp3
fclose
_itow
localtime
mktime
gmtime
_wtoi
fmod
sin
cos
abs
fabs
malloc
pow
__p__iob
fprintf
frexp
modf
_CIpow
fwrite
fflush
_vsnwprintf

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
GetTimeZoneInformation
GetLocaleInfoW
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
CreateThread
WideCharToMultiByte
HeapFree
HeapAlloc
HeapReAlloc
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessW
CreateFileW
SetFilePointer
SetEndOfFile
WriteFile
GetFileSize
ReadFile
MultiByteToWideChar
TerminateProcess
SetUnhandledExceptionFilter
GetVersionExA
DeleteFileW
GetVersionExW
LoadLibraryA
SetLastError
MulDiv
CreateDirectoryW
GetDriveTypeW
FindFirstFileW
FindClose
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
FindNextFileW
GetTempPathW
GetLocalTime
TlsAlloc
TlsSetValue
DeleteCriticalSection
lstrlenA

user32

LoadIconW
GetCursorPos
MapWindowPoints
SendMessageW
EnableWindow
GetWindowLongW
SetWindowLongW
CharLowerW
CharUpperW
GetPropW
RemovePropW
FillRect
GetIconInfo
DrawStateW
GetParent
GetClientRect
InvalidateRect
CallWindowProcW
SetPropW
DestroyWindow
ShowWindow
GetWindowRect
IsZoomed
GetWindowLongA
SendMessageA
MoveWindow
DefWindowProcW
GetWindowTextLengthW
GetWindowTextW
UnregisterClassW
LoadCursorW
RegisterClassExW
IsWindowEnabled
GetSystemMetrics
CreateWindowExW
SetFocus
CreateAcceleratorTableW
SetForegroundWindow
BringWindowToTop
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DestroyAcceleratorTable
MessageBoxW
PostMessageW
GetWindowThreadProcessId
IsWindowVisible
GetForegroundWindow
EnumWindows
SetWindowPos
ScreenToClient
RedrawWindow
UpdateWindow
ReleaseCapture
BeginPaint
EndPaint
SetCapture
GetSysColor
GetSysColorBrush
SetWindowTextW
GetDC
InflateRect
ReleaseDC
GetWindowDC
ValidateRect
GetWindow
GetFocus
GetClassNameW
DrawFocusRect
GetKeyState
GetMessagePos
ClipCursor
SetCursor
SetClassLongW
GetScrollPos
SetScrollInfo
SetScrollPos
GetScrollRange
PeekMessageW
DrawFrameControl
EnumPropsExW
SetActiveWindow
RegisterClassW
AdjustWindowRectEx
GetActiveWindow
MsgWaitForMultipleObjects
GetMenu
IsIconic
EnumChildWindows
DefFrameProcW
IsChild
SetCursorPos
LoadImageW
SystemParametersInfoW
DefWindowProcA
RegisterClassA
CreateWindowExA
RegisterWindowMessageA
DrawIconEx
DestroyIcon

gdi32

GetFontData
CreateDCW
SelectObject
GetTextFaceW
DeleteDC
GetObjectType
GetObjectW
DeleteObject
IntersectClipRect
GetStockObject
SetBkColor
SetTextColor
ExcludeClipRect
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBSection
GdiSetBatchLimit
GdiGetBatchLimit
StretchBlt
GetObjectA
CreateSolidBrush
GetDeviceCaps
CreateFontW
GetTextExtentPoint32W
SetBkMode
SetTextAlign
TextOutW
SetStretchBltMode
SetBrushOrgEx
GetDIBits
GetPixel
CreateFontIndirectW
GetTextMetricsW
CreateBitmap
SetPixel

comdlg32

ChooseColorW

comctl32

CreateStatusWindowW
InitCommonControlsEx
_TrackMouseEvent
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_GetIconSize

ole32

CoInitialize
CoTaskMemFree
RevokeDragDrop

shell32

ShellExecuteExW

Sections

.code
Size: 489KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Omsi-Helpmaker/Readme.txt
Omsi-Helpmaker/Teltow/TTData/M29.ttl
Omsi-Helpmaker/Teltow/TTData/M29_Kud_Rat.ttp
Omsi-Helpmaker/Teltow/TTData/M29_Kud_Ros.ttp
Omsi-Helpmaker/Teltow/TTData/M29_Rat_Kud.ttp
Omsi-Helpmaker/Teltow/TTData/M29_Ros_Kud.ttp
Omsi-Helpmaker/Teltow/TTData/X10.ttl
Omsi-Helpmaker/Teltow/TTData/X10_Eic_Sts.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Eic_War.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Fis_Sts.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Her_Sts.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Her_War.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Sts_Eic.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Sts_Fis.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Sts_Her.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Sts_Zoo.ttp
Omsi-Helpmaker/Teltow/TTData/X10_War_Eic.ttp
Omsi-Helpmaker/Teltow/TTData/X10_War_Her.ttp
Omsi-Helpmaker/Teltow/TTData/X10_War_Zoo.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Zoo_Sts.ttp
Omsi-Helpmaker/Teltow/TTData/X10_Zoo_War.ttp
Omsi-Helpmaker/Tutorial.pdf
.pdf
Omsi-Helpmaker/output/Berlin-Spandau.cfg
Omsi-Helpmaker/output/Berlin-Spandau/Stop 92.pdf
.pdf
Omsi-Helpmaker/output/Berlin-Spandau/Timetable 92.pdf
.pdf
Omsi-Helpmaker/output/Berlin-Spandau/Tour 92.pdf
.pdf
Omsi-Helpmaker/output/Berlin-Spandau/Tour 92E.pdf
.pdf
Omsi-Helpmaker/output/Berlin-Spandau_19940529.cfg
Omsi-Helpmaker/output/Berlin-Spandau_19940529/Timetable 137.pdf
.pdf
Omsi-Helpmaker/output/Berlin-Spandau_19940529/Tour 137.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv Szczecin.cfg
Omsi-Helpmaker/output/Fiktiv Szczecin/Timetable F.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv Szczecin/Tour Specialni linky (nemaji navigaci).pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1.cfg
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop 101 Police Rynek.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop 109 Police OCH.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop 109 Police Rynek.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop 111 Police Rynek.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop A Plac Rodla.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop B Plac Rodla.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop C Plac Rodla.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Stop Nocni Plac Rodla.pdf
.pdf
Omsi-Helpmaker/output/Fiktiv_Szczecin_V2.1/Timetable 109.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529.cfg
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 100_1.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 100_2.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 450_1.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 450_2.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 451_1.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 451_2.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 452_1.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 452_2.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 453.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 454_1.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 454_2.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 455_1.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 455_2.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 456_1.pdf
.pdf
Omsi-Helpmaker/output/Lemmental_19940529/Timetable 46.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin.cfg
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 082 - Kollataja.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 522 - Kollataja.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 57- Kollataja.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 58 - SS.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 59 - Plac Rodla.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 63 - Kollataja.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 68 - Plac Rodla.pdf
.pdf
Omsi-Helpmaker/output/Projekt_Szczecin/Stop 82 - Krucza.pdf
.pdf
Omsi-Helpmaker/output/Teltow-komplett.cfg
Omsi-Helpmaker/output/Teltow/Fahrplan X10 Hin.pdf
.pdf
Omsi-Helpmaker/output/Teltow/Haltestelle X10 Beeskowdamm Hin.pdf
.pdf
Omsi-Helpmaker/output/Teltow/Umlauf X10.pdf
.pdf
Omsi-Helpmaker/output/Wien_1_2005_Linie_24A.cfg
Omsi-Helpmaker/output/Wien_1_2005_Linie_24A/Stop Kagran.pdf
.pdf
Omsi-Helpmaker/output/Wien_1_2005_Linie_24A/Timetable 24A.pdf
.pdf
Omsi-Helpmaker/output/Wien_1_2005_Linie_24A/Tourplans.pdf
.pdf

Resubmissions

Sharing

General

Malware Config

Signatures

Files

829c4ab4d4c38f3893d63de997983f42

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

ole32

shell32

Sections

.code Size: 489KB - Virtual size: 488KB

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 30KB - Virtual size: 34KB

.rsrc Size: 1024B - Virtual size: 700B

.code
Size: 489KB - Virtual size: 488KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 30KB - Virtual size: 34KB

.rsrc
Size: 1024B - Virtual size: 700B