OptiCraft[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OptiCraft.exe
Size

103.1MB
MD5

7d42d73041c71245ee9d09e0979e6f3f
SHA1

df92f1348f13f27e2d9c6351d3e0e81b38c3e6b2
SHA256

4888a46f851df45465e221a3d54c4878f80c80f64ea3b6aeab2d91196671c478
SHA512

3d42b12156e1cc0aa1e2ddfed95f002d40ac8c12940715586583a804f2b901f8dd0d0a23c17e573e70d1a180db6db12b8379d473e807dcb396ed5325e1700f0f
SSDEEP

1572864:VGGcQZcg9gRPpzhphqxBYM4/L8GiYl4wHc3nv4HI8+7s0zr9kPK35A/P5/2tyC00:t8Nphq/YM4Lc40zrf060Hllv8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OptiCraft.exe

Files

OptiCraft.exe
.exe windows:6 windows x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

Size: 73.5MB - Virtual size: 73.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.0MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hmmfvebw
Size: 23.6MB - Virtual size: 23.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

epfnaioh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE