Ocean[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ocean.exe
Size

815KB
MD5

66aa901a32fd3d2ffe05cde3d5577b8a
SHA1

18d8a7dd9e7cf48789c7d36473c03834d8c62ff5
SHA256

a03f74de668f9394a1113c2fcf212cbe492e4254369609e800011cadc84c72d4
SHA512

eb6a0b490e21d25c180749a22bfb5cd521e13c754973eaf40b73f0e70b3542d2f80f8708cc25a4e4364d5a82a2f3dacc1371cc93a88aaea6b5e4408b8838d814
SSDEEP

24576:LXAfzp5p6GTsTue06KPnolCTXuT6Divya:LQrbplTsTu5oEzuwi6a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ocean.exe

Files

Ocean.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ