Opera‮gepj[.][.]exe | Triage

Resubmissions

19/04/2024, 13:37

240419-qw1mcsdf99 7

18/04/2024, 10:32

240418-mlc7jabg61 7

Sharing

Copy URL Twitter E-mail

General

Target

Opera‮gepj..exe
Size

3.0MB
MD5

e339f58e4fb471aeaf378acd68b17094
SHA1

e403328b02eda200a6750a90f091acf9b478ba2f
SHA256

1d5edf98cb50e28354ec1432ed59b344cf39f6e3af6b793845e14773f5c890ef
SHA512

a11879c16d56dd0c841786d14b4126283bf6d4cbd7168af46fd3e9375e16f41d33cef87f93b4286e810a1d493cded95b4fb7964db92a924ecf63d49e6cc01597
SSDEEP

6144:fH+ukuXqDw1hSXP0xaNle8zsfhZIKFKN82m:B7G5Pe8zsFg8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Opera‮gepj..exe

Files

Opera‮gepj..exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\VB.NET\MEGA VIRUS MAKER\Backup (MVM)\Last known works DO NOT USE JUST COPY AND USE\Application (MVM STUB)\Application\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ