OceanMinecraft[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

OceanMinecraft.exe
Size

7.7MB
MD5

fb9c6da24b7b3008a5f51945d355dbeb
SHA1

881fbd7805fd2b674a96124cd9bfcf3cc3ba42a0
SHA256

47149b40b3904054ec00d226a3289176bf9d43122d01c9626147fa8cd8f02d90
SHA512

9f42bbf4892f3ea4a2c297b28df7ffb42b87e60b11a94fe0e1ebbef24bcb13353357ac4e06b03c910590830d1ddff04b250de6f5adb46b46037ec2a36eebd8bc
SSDEEP

196608:hdrYRZU8QNZv5te22VCQmisdryzZNcObv:bGi8Q75te2SPmj1yzZNcOj

Score

1^/10

Malware Config

Signatures

Files

OceanMinecraft.exe
.exe windows:6 windows x64 arch:x64

faae82261fd66205dbeb0cc02fc6ba93

Code Sign

7b:2c:9b:d3:16:80:32:99
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

12-02-2016 17:39

Not After

12-02-2041 17:39

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24-06-2016 20:44

Not After

24-06-2031 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:a3:3a:c4:a8:ac:cc:fd:4c:93:cf:59:3b:32:e0:5f
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

21-08-2024 20:52

Not After

22-08-2025 20:52

Subject

CN=Gaston Dallavalle,O=Gaston Dallavalle,L=Córdoba,ST=Córdoba Province,C=AR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

19-02-2024 16:18

Not After

16-02-2034 16:18

Subject

CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13-11-2019 18:50

Not After

12-11-2034 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

eb:6a:4a:85:09:8c:49:34:50:fd:0e:ce:b7:e7:2f:b1:9f:68:0c:ad:24:d8:c1:88:e6:38:0e:8d:02:84:1d:a8
Signer

Actual PE Digest

eb:6a:4a:85:09:8c:49:34:50:fd:0e:ce:b7:e7:2f:b1:9f:68:0c:ad:24:d8:c1:88:e6:38:0e:8d:02:84:1d:a8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges

kernel32

GetVersionExA
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

msvcrt

___lc_codepage_func

wintrust

WinVerifyTrust

Exports

Exports

_cgo_dummy_export
authorizerTrampoline
callbackTrampoline
commitHookTrampoline
compareTrampoline
compilerCallback
doneTrampoline
freeCallback
includeCallback
memoryBlockFetch
memoryBlockFetchNull
memoryBlockIteratorFilesize
memoryBlockIteratorFirst
memoryBlockIteratorNext
preUpdateHookTrampoline
rollbackHookTrampoline
scanCallbackFunc
stepTrampoline
streamRead
streamWrite
updateHookTrampoline

Sections

.text
Size: - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 381KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.*4q
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.FNl
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.<f*
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

faae82261fd66205dbeb0cc02fc6ba93

Code Sign

7b:2c:9b:d3:16:80:32:99Certificate

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

1b:a3:3a:c4:a8:ac:cc:fd:4c:93:cf:59:3b:32:e0:5fCertificate

Extended Key Usages

Key Usages

5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7Certificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

eb:6a:4a:85:09:8c:49:34:50:fd:0e:ce:b7:e7:2f:b1:9f:68:0c:ad:24:d8:c1:88:e6:38:0e:8d:02:84:1d:a8Signer

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

wintrust

Exports

Exports

Sections

.text Size: - Virtual size: 5.7MB

.data Size: - Virtual size: 403KB

.rdata Size: - Virtual size: 5.8MB

.pdata Size: - Virtual size: 147KB

.xdata Size: - Virtual size: 36KB

.bss Size: - Virtual size: 381KB

.edata Size: - Virtual size: 656B

.idata Size: - Virtual size: 8KB

.CRT Size: - Virtual size: 96B

.tls Size: - Virtual size: 16B

.*4q Size: - Virtual size: 2.2MB

.FNl Size: 3KB - Virtual size: 3KB

.<f* Size: 7.7MB - Virtual size: 7.7MB

.rsrc Size: 1KB - Virtual size: 1KB

7b:2c:9b:d3:16:80:32:99
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

1b:a3:3a:c4:a8:ac:cc:fd:4c:93:cf:59:3b:32:e0:5f
Certificate

5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

eb:6a:4a:85:09:8c:49:34:50:fd:0e:ce:b7:e7:2f:b1:9f:68:0c:ad:24:d8:c1:88:e6:38:0e:8d:02:84:1d:a8
Signer

.text
Size: - Virtual size: 5.7MB

.data
Size: - Virtual size: 403KB

.rdata
Size: - Virtual size: 5.8MB

.pdata
Size: - Virtual size: 147KB

.xdata
Size: - Virtual size: 36KB

.bss
Size: - Virtual size: 381KB

.edata
Size: - Virtual size: 656B

.idata
Size: - Virtual size: 8KB

.CRT
Size: - Virtual size: 96B

.tls
Size: - Virtual size: 16B

.*4q
Size: - Virtual size: 2.2MB

.FNl
Size: 3KB - Virtual size: 3KB

.<f*
Size: 7.7MB - Virtual size: 7.7MB

.rsrc
Size: 1KB - Virtual size: 1KB