omniaim[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

omniaim.exe
Size

1.7MB
MD5

518faacaabcd1b8f0ea1609164ed6c20
SHA1

f592430b2ae596607ef36acb03376168fbe6a2be
SHA256

d1a2eec1724795192acf981a2f2bbcdeab3382c75b59f15f545a3177b83ab857
SHA512

89ce307f0cd89b20d6d4ba3dbd058ebc62f019ab564c52d53cb6ba92ff9ff75a7e5b355b0b4d4e8e061e83bb04902661595933a30e6c3b6578bfb639b4c727f8
SSDEEP

24576:zhbQed1q5isJFRY5ApnizQABoWHoOg4pn901rSTVrbK8vk/OneHPdY+mgG+cK3Zm:1bQeLxvk/OnWVNmlRnz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
omniaim.exe

Files

omniaim.exe
.exe windows:6 windows x64 arch:x64

7f8a2c1dd7d029afef3744c0b2d913ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ich\Omniaim\target\release\deps\omniaim.pdb

Imports

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

kernel32

GetModuleFileNameW
LoadLibraryExW
GetModuleHandleW
LoadLibraryW
FormatMessageW
WaitForSingleObject
HeapAlloc
GetLastError
FreeLibrary
LoadLibraryExA
HeapFree
GetProcessHeap
SetConsoleMode
GetConsoleMode
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
Module32NextW
ReadProcessMemory
OpenProcess
Process32NextW
LoadLibraryA
CreateToolhelp32Snapshot
GetCurrentThreadId
CloseHandle
InitializeSListHead
SetThreadErrorMode
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateMutexA
WaitForSingleObjectEx
GetSystemTimeAsFileTime
GetCurrentThread
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetProcAddress
CreateThread
Sleep
GetModuleHandleA
WriteConsoleW
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceCounter
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetCurrentProcess
MultiByteToWideChar
SetFileInformationByHandle
IsProcessorFeaturePresent
GetFullPathNameW
ExitProcess
GetStdHandle
GetCurrentProcessId
TerminateProcess
QueryPerformanceFrequency
HeapReAlloc
AcquireSRWLockShared
ReleaseSRWLockShared
ReleaseMutex
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx

user32

GetForegroundWindow
SetWindowDisplayAffinity
GetMonitorInfoW
MonitorFromWindow
CreateWindowExW
GetMessageW
GetCursorPos
SetCursor
SetClassLongPtrW
SetWindowPos
TranslateMessage
IsProcessDPIAware
MapVirtualKeyA
DispatchMessageW
LoadCursorW
GetWindowLongPtrW
SystemParametersInfoA
DestroyIcon
MonitorFromRect
ShowCursor
ClipCursor
GetClipCursor
GetActiveWindow
AdjustWindowRectEx
GetMenu
GetWindowLongW
ShowWindow
SetWindowLongW
SendMessageW
GetRawInputData
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
ReleaseCapture
SetCapture
ChangeDisplaySettingsExW
MsgWaitForMultipleObjectsEx
GetWindowPlacement
RegisterRawInputDevices
SetWindowPlacement
RegisterWindowMessageA
CloseTouchInputHandle
GetTouchInputInfo
GetClassInfoExW
GetClassNameW
TrackMouseEvent
DestroyWindow
ScreenToClient
CallNextHookEx
SetWindowsHookExW
MapVirtualKeyW
GetKeyState
DefWindowProcW
RedrawWindow
GetUpdateRect
PeekMessageW
PostThreadMessageW
ValidateRect
SetCursorPos
GetDC
ClientToScreen
GetClientRect
IsWindow
FindWindowW
SetWindowLongPtrW
PostMessageW
RegisterTouchWindow
GetSystemMetrics
SetForegroundWindow
SendInput
GetWindowRect
InvalidateRgn
RegisterClassExW

ole32

CoUninitialize
OleInitialize
CoInitializeEx
RegisterDragDrop
CoCreateInstance
RevokeDragDrop

opengl32

wglGetCurrentContext
wglGetCurrentDC
wglShareLists
wglDeleteContext
wglCreateContext
wglGetProcAddress
wglMakeCurrent

gdi32

SwapBuffers
GetPixelFormat
DescribePixelFormat
SetPixelFormat
GetDeviceCaps
CreateRectRgn
DeleteObject
ChoosePixelFormat

dwmapi

DwmEnableBlurBehindWindow

oleaut32

SysFreeString
SysStringLen
GetErrorInfo

winmm

timeBeginPeriod
timeGetDevCaps
timeEndPeriod

shell32

DragFinish
DragQueryFileW

uxtheme

SetWindowTheme

imm32

ImmAssociateContextEx
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext

ntdll

RtlNtStatusToDosError
NtWriteFile
NtReadFile

vcruntime140

__current_exception_context
_CxxThrowException
__current_exception
__C_specific_handler
memcpy
memcmp
memmove
memset
__CxxFrameHandler3
strstr
memchr

api-ms-win-crt-math-l1-1-0

logf
fmodf
trunc
atan2f
pow
tanf
truncf
round
__setusermatherr
cosf
sinf
powf
floor
acosf
sqrtf
atanf
ceilf
log

api-ms-win-crt-string-l1-1-0

strlen
strncpy
strcmp
strncmp

api-ms-win-crt-runtime-l1-1-0

_wassert
_set_app_type
_initialize_narrow_environment
_seh_filter_exe
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_configure_narrow_argv
_cexit

api-ms-win-crt-stdio-l1-1-0

ftell
__stdio_common_vsscanf
fseek
__acrt_iob_func
fclose
fread
_set_fmode
__p__commode
__stdio_common_vfprintf
fflush
fwrite
__stdio_common_vsprintf
fopen

api-ms-win-crt-heap-l1-1-0

free
malloc
_set_new_mode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f8a2c1dd7d029afef3744c0b2d913ff

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bcrypt

advapi32

kernel32

user32

ole32

opengl32

gdi32

dwmapi

oleaut32

winmm

shell32

uxtheme

imm32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 348KB - Virtual size: 347KB

.data Size: 2KB - Virtual size: 48KB

.pdata Size: 51KB - Virtual size: 50KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 348KB - Virtual size: 347KB

.data
Size: 2KB - Virtual size: 48KB

.pdata
Size: 51KB - Virtual size: 50KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 4KB