Dope[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dope.exe
Size

254KB
MD5

3f6303b84b3d12eaf7d316261f224a4d
SHA1

c3408cd47a3fdef2c91b89747524128f967a188f
SHA256

cb653755457b0fcbfbb8c1ad0e3e0b8f37ce5532fd26237a7542ee132e99faa1
SHA512

90a9a8444ceadf88c2ca01d2c8ac7e739f2808aa4fe30b1076fd6903e3d7e51464bb0fe3881f56db03ac27f54630e8e76ddaad8e562e089d357f75bbcbe58382
SSDEEP

3072:Lm+zahMVlwrqfMXYTd+s5ylLzMhu6/zRLq4XJPhEKuEkHBA4dtBA4dCG:a+t/UXYTEs5ughuaLq6SBA4vBA4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dope.exe

Files

Dope.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\emico\Downloads\old-dope-clicker-main\old-dope-clicker-main\DopeDev-main\Dope\Dope\obj\Debug\Dope.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ