Opera[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Opera.exe
Size

13.5MB
MD5

e2f2a328f6d4aa39740a8e9005e837ec
SHA1

0117361c9033b506f26f1eea5dad4e1faca7f0dd
SHA256

34796fa3e8439ba7cdc63d83b0ed4f5dc6f3f4027e70f999c249cb20c8452064
SHA512

3f020159b20c1f2dde81f5215676c782b3e02d54b02b4ef2a2107b6ee74576a5a3d411e831dda8c915a5b940a446aed9ee11f4088898e2c82b334d83b55829e5
SSDEEP

393216:pumYUTPdOvrMEz5/gLw6kSqv7CerLIyyrgDHFeeSJNd:pu4TPdOvLz5lLv7Iyy8Jbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Opera.exe

Files

Opera.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.4MB - Virtual size: 13.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ