oCam[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
oCam.exe
Size 5.2MB
Sample240603-sb6c8aac2y
SHA256 075fe4731534f6d12f1927274e28d5c41a675d63d84681ccf946dcfa7dfd769a
MD5 cc8b81c6f72783a5ea0098325803a959
SHA1 38a7330eb5c45bf3e3ba5a6508e9ff64c9a0038b
SHA512 8d5c06aa693c6f30dc58312d14da2e09ff79ac3722754680103880e5de702bbcf0307f429b81dc461f7f65fdee14fc885428a11d081c055685fec9af49339a05
SSDEEP 98304:VUx3WE8uPlfZeOOTS/8sSskaRRRRRRRvxA:Cx8GJ/8sSskaRRRRRRRa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

oCam.exe

.exe 5.2MB

oCam.exe

IMPHASH 6e5b8f6d9b06147b7d6ea0b09aaa9150
SHA256 075fe4731534f6d12f1927274e28d5c41a675d63d84681ccf946dcfa7dfd769a
MD5 cc8b81c6f72783a5ea0098325803a959
SHA1 38a7330eb5c45bf3e3ba5a6508e9ff64c9a0038b
SHA512 8d5c06aa693c6f30dc58312d14da2e09ff79ac3722754680103880e5de702bbcf0307f429b81dc461f7f65fdee14fc885428a11d081c055685fec9af49339a05
SSDEEP 98304:VUx3WE8uPlfZeOOTS/8sSskaRRRRRRRvxA:Cx8GJ/8sSskaRRRRRRRa
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

ea:96:12:5c:77:f3:d7:27:31:94:9e:19:d7:86:35:78:6f:28:92:a5:42:e3:37:96:2f:a2:74:43:37:9e:86:3e

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 17, 2021

SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

PE Signature issue

Digest

9e:24:63:05:5e:cb:ad:30:06:9e:e5:f4:bc:b3:84:c5:26:54:7b:cf

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jun 17, 2021

SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

14:18:7f:d7:df:d2:40:ff:87:b8:cc:9c

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 21, 2021 - May 21, 2024

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 28, 2021 - Mar 1, 2032

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

14:18:7f:d7:df:d2:40:ff:87:b8:cc:9c

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 21, 2021 - May 21, 2024

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Serial Number

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 28, 2021 - Mar 1, 2032

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

4271160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopyInd VariantCopy VariantClear VariantInit CreateErrorInfo GetErrorInfo SetErrorInfo GetActiveObject VariantInit SysFreeString

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegQueryValueExA RegQueryValueExW RegOpenKeyExA RegOpenKeyExW RegFlushKey RegCreateKeyExW RegCloseKey OpenProcessToken LookupPrivilegeValueW GetUserNameW AdjustTokenPrivileges CryptGenRandom CryptReleaseContext CryptAcquireContextW

user32

CharNextW LoadStringW SetClassLongW GetClassLongW SetWindowLongW GetWindowLongW CreateWindowExW WindowFromPoint WaitMessage WaitForInputIdle UpdateLayeredWindow UpdateWindow UnregisterHotKey UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenuEx TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups ShowCaret SetWindowRgn SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetKeyboardState SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterHotKey RegisterClipboardFormatW RegisterClassW RedrawWindow PtInRect PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect NotifyWinEvent MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild IsCharAlphaNumericW IsCharAlphaW InvalidateRgn InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect HideCaret GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowDC GetUpdateRect GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetScrollBarInfo GetPropW GetParent GetWindow GetMessageTime GetMessagePos GetMessageExtraInfo GetMessageW GetMenuStringW GetMenuState GetMenuItemRect GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDlgItem GetDlgCtrlID GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursorInfo GetCursor GetClipboardData GetClientRect GetClassNameW GetClassInfoExW GetClassInfoW GetCapture GetAsyncKeyState GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect ExitWindowsEx EnumWindows EnumThreadWindows EnumClipboardFormats EnumChildWindows EndPaint EndMenu EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawStateW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIconIndirect CreateIcon CountClipboardFormats CopyImage CloseClipboard ClientToScreen ChildWindowFromPoint CheckMenuItem CharUpperBuffW CharUpperW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint CharLowerBuffA CharUpperBuffA AdjustWindowRectEx ActivateKeyboardLayout EnumDisplayMonitors GetMonitorInfoW MonitorFromPoint MonitorFromRect MonitorFromWindow

kernel32

Sleep VirtualFree VirtualAlloc lstrlenW VirtualQuery QueryPerformanceCounter GetTickCount GetSystemInfo GetVersion CompareStringW IsValidLocale SetThreadLocale GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW WideCharToMultiByte MultiByteToWideChar GetACP LoadLibraryExW GetStartupInfoW GetProcAddress GetModuleHandleW GetModuleFileNameW GetCommandLineW FreeLibrary GetLastError UnhandledExceptionFilter RtlUnwind RaiseException ExitProcess ExitThread SwitchToThread GetCurrentThreadId CreateThread DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FindFirstFileW FindClose WriteFile GetStdHandle CloseHandle GetProcAddress RaiseException LoadLibraryA GetLastError TlsSetValue TlsGetValue LocalFree LocalAlloc GetModuleHandleW FreeLibrary lstrcmpW WritePrivateProfileStringW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualProtect VirtualFree VirtualAlloc VerSetConditionMask VerifyVersionInfoW UnmapViewOfFile TryEnterCriticalSection TerminateProcess SwitchToThread SuspendThread Sleep SizeofResource SetThreadPriority SetThreadLocale SetProcessWorkingSetSize SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile SetDllDirectoryW ResumeThread ResetEvent RemoveDirectoryW ReadFile QueryPerformanceFrequency QueryPerformanceCounter OutputDebugStringW OpenProcess OpenFileMappingW MultiByteToWideChar MulDiv MapViewOfFile LockResource LocalFree LoadResource LoadLibraryW LeaveCriticalSection IsValidLocale IsBadReadPtr InitializeCriticalSection HeapFree HeapDestroy HeapCreate HeapAlloc GlobalUnlock GlobalSize GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetWindowsDirectoryW GetVolumeInformationW GetVersionExW GetVersion GetUserDefaultLCID GetTimeZoneInformation GetTickCount GetThreadPriority GetThreadLocale GetTempPathW GetTempFileNameW GetSystemTimeAsFileTime GetSystemInfo GetSystemDirectoryW GetSystemDefaultLangID GetStringTypeExA GetStringTypeExW GetStdHandle GetLongPathNameW GetProcAddress GetPrivateProfileStringW GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetFileAttributesW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetComputerNameW GetCPInfoExW GetCPInfo GetACP FreeResource InterlockedIncrement InterlockedExchange InterlockedDecrement InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime ExitProcess EnumCalendarInfoW EnterCriticalSection DeleteFileW DeleteCriticalSection CreateThread CreateMutexW CreateFileW CreateEventW CreateDirectoryW CompareStringA CompareStringW CloseHandle Sleep GetVersionExW SetThreadExecutionState

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWorldTransform SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetRectRgn SetROP2 SetPixel SetMapMode SetGraphicsMode SetEnhMetaFileBits SetDIBits SetDIBColorTable SetDCPenColor SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetViewportOrgEx GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetTextColor GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetNearestPaletteIndex GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetCurrentPositionEx GetCurrentObject GetClipRgn GetClipBox GetBrushOrgEx GetBkMode GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtFloodFill ExtCreateRegion ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRoundRectRgn CreateRectRgnIndirect CreateRectRgn CreatePolygonRgn CreatePenIndirect CreatePatternBrush CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn CloseEnhMetaFile Chord BitBlt ArcTo Arc AngleArc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

CreateStreamOnHGlobal IsAccelerator OleDraw OleSetMenuDescriptor OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitializeEx CoInitialize IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls

msvcrt

memset memcpy

shell32

ShellExecuteExW ShellExecuteW Shell_NotifyIconW ILFree ILCreateFromPathW SHGetPathFromIDListW SHGetMalloc SHGetDesktopFolder SHBrowseForFolderW

comdlg32

ChooseColorW GetOpenFileNameW

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

oleacc

LresultFromObject AccessibleChildren AccessibleObjectFromWindow

winmm

timeGetTime timeEndPeriod timeBeginPeriod sndPlaySoundW

shlwapi

PathIsDirectoryW

iphlpapi

GetAdaptersInfo

urlmon

CoInternetSetFeatureEnabled

Name

.text

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

753KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

90B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

80B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

365KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

642KB

Virtual Size

642KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

oCam.exe

PE Signature issue

PE Signature issue

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

msvcrt

shell32

comdlg32

winspool.drv

oleacc

winmm

shlwapi

iphlpapi

urlmon

generic