OHMS[.]exe | Triage

Sharing

General

Target

OHMS.exe
Size

1.1MB
MD5

04ea0da6b921494dd73f396ecfe1de5d
SHA1

bb082c74dd2297472ee4855f5400610358a775ed
SHA256

db5eb79f5123b64dee1703eca26c91c3e4caa69b4515293778962c54eaded05d
SHA512

b853ce633f9f6796419324897ab80bc9236ed4ab8447a5d6d7cdb66ee9f0392207fab57c9ce804e01231fa2e8da7b0a20405b27ba026d985e16d4e71776646df
SSDEEP

24576:lz2Vk+YQNRfO2w9aiXjvxNe0O0w8B63L+q1Kj1:laVNYCG2w8ibe07U3L+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OHMS.exe

Files

OHMS.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ