OperaInstaller (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
OperaInstaller (1).exe
Size 174KB
Sample260524-x2pklset2n
SHA256 fa46e80566ac59a23ba571389386a6787daab8d269d4aa77995cc91f76d9462d
MD5 f288e9a24c5982a28d22ecb4eaef8908
SHA1 c027ef102e3ec82fa226434f5995c9f7a78e6f41
SHA512 4ed5b0839ddfa15ec563aac6e483212a2e4d32ff96b244af6a9fa9a7c3529887b8abccb4f3b17f507ab242a9eb37d8167b8ac287ceee51406ede39c820246337
SSDEEP 3072:6LSLCyHrPRVwjZSSecVqyFjcnlfAK3VPl2l14dJkVH5nfeRl//bRRlTHGeZ19vqY:6WmErD6ZSRcVqvZn3VPRVdZ1EvO
TLSH
T1D6046A8236C188B5E57254321A65DAB19A7DFC700F24DDEB33947A3B0DB42C05A36F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

OperaInstaller (1).exe

.exe 174KB

OperaInstaller (1).exe

IMPHASH 646153248bd7fba14fd4f8ab2db44da8
SHA256 fa46e80566ac59a23ba571389386a6787daab8d269d4aa77995cc91f76d9462d
MD5 f288e9a24c5982a28d22ecb4eaef8908
SHA1 c027ef102e3ec82fa226434f5995c9f7a78e6f41
SHA512 4ed5b0839ddfa15ec563aac6e483212a2e4d32ff96b244af6a9fa9a7c3529887b8abccb4f3b17f507ab242a9eb37d8167b8ac287ceee51406ede39c820246337
SSDEEP 3072:6LSLCyHrPRVwjZSSecVqyFjcnlfAK3VPl2l14dJkVH5nfeRl//bRRlTHGeZ19vqY:6WmErD6ZSRcVqvZn3VPRVdZ1EvO
TLSH
T1D6046A8236C188B5E57254321A65DAB19A7DFC700F24DDEB33947A3B0DB42C05A36F6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

7b:ec:25:9b:7b:c3:d6:1f:7e:38:40:4b:9f:0b:be:d7:a8:90:b9:38:be:7c:f2:5d:37:51:7e:3a:e0:43:80:86

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2022-12-15,CN=Alexis Sreckovic,O=Alexis Sreckovic,L=Greven,ST=Nordrhein-Westfalen,C=DE,1.3.6.1.4.1.311.60.2.1.3=#13024445,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.1=#13064265726c696e,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Apr 5, 2026

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Serial Number

56:b6:29:cd:34:bc:78:f6

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

May 31, 2017 - May 30, 2042

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 26, 2019 - Mar 22, 2034

Subject

Serial Number

67:4b:66:7c:94:6d:92:da:e1:16:7f:52:5f:e3:9e:b5

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 4, 2026 - Jul 7, 2027

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

21591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Admin\source\repos\OperaInstaller1\Release\OperaInstaller1.pdb

wininet

HttpQueryInfoA HttpOpenRequestA InternetCrackUrlA InternetOpenW InternetSetOptionA HttpQueryInfoW InternetCrackUrlW InternetOpenA HttpSendRequestW InternetCloseHandle InternetConnectW HttpSendRequestA InternetConnectA InternetSetOptionW InternetReadFile HttpOpenRequestW

shell32

ShellExecuteExW

gdiplus

GdipCreatePath GdipSetStringFormatLineAlign GdipCreateFont GdipCreateSolidFill GdipFillPath GdipClosePathFigure GdipGetGenericFontFamilySansSerif GdipFree GdipDrawString GdipDisposeImage GdipDeleteGraphics GdipDeleteStringFormat GdipDeleteFont GdipGetImageWidth GdipDeletePen GdipCreatePen1 GdipSetStringFormatAlign GdipDrawLineI GdipSetSmoothingMode GdipDeletePath GdipDrawImageRectI GdipAlloc GdipDeleteBrush GdipCloneImage GdipCreateFontFamilyFromName GdipAddPathArcI GdipGetImageHeight GdipDeleteFontFamily GdipCreateStringFormat GdipLoadImageFromFile GdiplusShutdown GdiplusStartup GdipCreateFromHDC

kernel32

GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetProcessHeap LCMapStringW TlsFree TlsSetValue VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType HeapAlloc HeapFree GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle LoadLibraryExW SetDefaultDllDirectories AddDllDirectory WriteFile GetEnvironmentVariableW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW MultiByteToWideChar Sleep DeleteFileW CloseHandle CreateThread GetExitCodeProcess TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError GetLastError RaiseException RtlUnwind GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess GetProcAddress DecodePointer WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter FreeLibrary

user32

DestroyWindow SetWindowPos GetPropW PostMessageA CreateWindowExW RemovePropW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageA TranslateMessage LoadIconA GetClientRect PostQuitMessage UpdateWindow SetForegroundWindow InvalidateRect BeginPaint EndPaint GetMessageA LoadCursorA SetPropW DefWindowProcW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

Name

.text

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

OperaInstaller (1).exe

wininet

shell32

gdiplus

kernel32

user32

advapi32

generic