Behavioral task
behavioral1
Sample
omp-launcher.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
omp-launcher.exe
Resource
win10v2004-20240802-en
General
-
Target
omp-launcher.exe
-
Size
2.9MB
-
MD5
475dc5aab9de61fd36a6c35d7937b380
-
SHA1
d3912f768acada90bea893a8fd6311990676940e
-
SHA256
9b9c56c90769920ca45ca78a30781109a462a4ef9a7b720c016fb513e9f6e77c
-
SHA512
ffcc0fccc943dc254332a94ea67311394af9d0a3c889bcbbf810e97b3968bf8758a149249ad3a020c1e19a8b3d332cfa1513f1a7e7142a4e3116e8c43331e812
-
SSDEEP
49152:o9hLSe1wxPiCVQLF6yzuZKRoJqREITgE3K0nMB5AHQb2j6WdmWcR/1fSQBXn6DXh:o9Ee1APVQLFn7RoJqXn60na5A1j60mhP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource omp-launcher.exe
Files
-
omp-launcher.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 9.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE