General

  • Target
    oCam_v550.0.exe
  • Size 9.1MB
  • Sample261017-lddbwsdt2s
  • SHA256 9bc3c938f73d6713147d85e8e60cc2c37645c1b1ca31e0eee26363b8aceb7b06
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Inno Setup is an open-source installation builder for Windows applications. 1 IoCs

    Inno Setup installer

File Explorer

  • oCam_v550.0.exe
    .exe 9.1MB

oCam_v550.0.exe

  • IMPHASH 930db5550fff70a7cb029d279548a28b
  • SHA256 9bc3c938f73d6713147d85e8e60cc2c37645c1b1ca31e0eee26363b8aceb7b06
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Inno Setup is an open-source installation builder for Windows applications.

    Inno Setup installer

Digest
2e:a5:62:6d:7e:53:e8:46:79:92:2b:d1:93:20:3a:00:19:df:7d:6c:8c:ae:3b:b1:79:19:ce:6b:24:ce:a8:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Digest
5c:72:81:f4:14:d2:24:b8:e3:7f:e9:ce:ae:49:f2:e5:3b:8a:e1:78
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=200111-0632202,CN=OORT Inc.,O=OORT Inc.,STREET=61\, Geumbong-ro,L=Gwangsan-gu,ST=Gwangju,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
5
Entry point
96244
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths