OMMLoader_1[.]0[.]5_pre[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OMMLoader_1.0.5_pre.exe
Size

32.6MB
MD5

b608e9ea8ecfc50d677b58a458d1c670
SHA1

544537e69f356fd566809717c18457bf7bfea5ab
SHA256

df338926c2d7632862ec8028e9ed19197736ee9f275df58f24948596b121f0c2
SHA512

0d4e4274b724bcc9a53b361c83f7385f7361f90152d4b100b84224a741dae8c390c8271a0d46ce1c33d71b58ca7317aa6db09045ab4b22e00863d28f25031760
SSDEEP

393216:HDrlfTuEsFbEkxc1ChaE1iAyqLg6A0GHEG:HDJSEs5qgA0GH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OMMLoader_1.0.5_pre.exe

Files

OMMLoader_1.0.5_pre.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ