Behavioral task
behavioral1
Sample
OmegaBot.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
OmegaBot.exe
Resource
win10v2004-20220901-en
General
-
Target
OmegaBot.exe
-
Size
3.9MB
-
MD5
5549af791ec3446dba8f6ff085b49f91
-
SHA1
2d58c56baaae3f98d368a82ad6c8ab50f8a4f65b
-
SHA256
111ec1ff0871fdff403aaffeff25f3ed8242e7e20db8da2fdb434b4983023ca0
-
SHA512
aa61a3db34e1ed7cfc9ae16ba56d1a0fe0ae6785799c0aef9f926e56c9c0dae6a0967cfdd8090105d95d470c21fff51ae30c4b91c67553b4f0a84cd4d70912f8
-
SSDEEP
98304:jlY3owxtlLsYbqfUHo5g+WYEfZ8tSaQgcwKD5tLdH+G:jlY3owf4iowf2rhKDN+G
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
OmegaBot.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 17KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 63KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ