Static

static

8

Resubmissions

02/08/2026, 19:58

260802-yp4z7sfa488

02/08/2026, 19:58

260802-yp4z7sfa47

02/08/2026, 19:56

260802-ynx59s1djg8

Sharing

Copy URL Twitter E-mail

General

  • Target
    OperaInstaller (2).exe
  • Size 178KB
  • Sample260802-yp4z7sfa47
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
revoked_codesign

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • OperaInstaller (2).exe
    .exe 178KB

OperaInstaller (2).exe

  • IMPHASH 1798cc22584a39da2d7b9d09155f8b60
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx86arch:x86

  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

Password
passowrd

PE Signature issue

Digest
9b:b8:0a:ab:d4:b3:39:0b:16:d6:b6:49:5d:35:69:b6:b4:31:f7:9f:1d:c1:8e:0a:07:ca:ef:6d:8f:33:22:2a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=2022-12-15,CN=Alexis Sreckovic,O=Alexis Sreckovic,L=Greven,ST=Nordrhein-Westfalen,C=DE,1.3.6.1.4.1.311.60.2.1.3=#13024445,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.1=#13064265726c696e,2.5.4.15=#130f427573696e65737320456e74697479
Minor OS version
0
Major OS version
6
Entry point
24087
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Admin\source\repos\OperaInstaller1\Release\OperaInstaller1.pdb