OculusDash[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OculusDash.exe
Size

270KB
MD5

9db7cc8b646a01c60859b318f85e65d0
SHA1

e6fc1429eba70c1a4324844161b54fff5a4f23ed
SHA256

910c41288ad16c7892d56ceeca514c18ed5a9698e9463fbd7ad04aa4d14b7572
SHA512

45d98762a6738a81ce8c101ac4728c0b968caa0dfaa39fbd1a9b66f1dafbb38ccbea01c77e7ab84f9d897ec0203d27495f1279fff18c05b94415795d0654e161
SSDEEP

6144:ZPI4XFh3crAWfVFFdlee2Gq8Nq8n5J8bdLWKnt:yZeeZkBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OculusDash.exe

Files

OculusDash.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Kaitlyn\Documents\GitHub\OculusKiller\OculusKiller\obj\x64\Release\OculusDash.pdb

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ