Oppscrasher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Oppscrasher.exe
Size

883KB
MD5

e65828bfa4c416795c4709ae5f09e4a3
SHA1

9654670bff8a9520373f47d6c4031c93a5d4b313
SHA256

e01d8938e5690de49d11882e214881ed7817b3ef905ab5b6c982a486342df0dc
SHA512

afb7833034f9905f8e7c1135e7c7a82194d6be8c0260a30c7034a82036bbc83788cd5509f446e8b5bfc85fd517e644e727e92b7f85ecc3b629a2041b13c21d1f
SSDEEP

24576:zOL4aPxIUpOOHsayoLhrss1qQSV5ifk4pJ1y:zINk4JoK7S2hpJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Oppscrasher.exe

Files

Oppscrasher.exe
.exe windows:4 windows x86 arch:x86

3201205a56a30111410d37d9c12832b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetLastError
GetConsoleTitleA
SetLastError

user32

MessageBoxA

msvcrt

_controlfp
strcat
strcmp
strcpy
strlen
strstr
remove
printf
calloc
malloc
sscanf
_errno
strncpy
free
exit
getenv
memset
_getpid
sprintf
fflush
_iob
vsprintf
memcmp
atol
_mkdir
_rmdir
_close
_read
_lseek
_open
_write
_stat
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ