Ocean[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ocean.exe
Size

815KB
MD5

840fbb09d628227d2932726498e69ef2
SHA1

61b2c6beae05a13c7cdd9033035fbb1ddb506b9f
SHA256

f4b5d81cd8ea1da1b81fa0a289212a356a7bf32e912044d9bdda48d3855d348f
SHA512

aa5b1190afbf16ed695570a0e8c595a6052390edfa55a6bacdb81a1d98a35ed1a672b5c931202f88d62d9af9b6ff66874f9c146a9390697c5898310a9021f8d8
SSDEEP

24576:WXAfzp5p6GTsTue06KPnolCTXuT6Divyab1:WQrbplTsTu5oEzuwi6ab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ocean.exe

Files

Ocean.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 802KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ