DoppelVirus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DoppelVirus.exe
Size

11.9MB
MD5

bd7baf1769a9e660cd7a3ebbdbe86591
SHA1

15154b53c2bf10775bb0f2ce2925c52616a9568c
SHA256

f7ec130bdda198102fd655a5466674979668eb5d571899708b8072572f8abd07
SHA512

8c0d6fbced561434d91631a729f9fd875e71eb2da5b109ef673dd380c228eb9b568865f55d5492e09d3c4de494b72e445d21cb2c1ec3483a3d37f4d6e0731167
SSDEEP

196608:LARXKps8e0j4q4BZvF0x1AkAuWmWaGvAsT5yKlyJbU21oNcI92wILs:09seOa/E1lWmmvnQwy9UdcsHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DoppelVirus.exe

Files

DoppelVirus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

DoppelVirus.pdb

Imports

mscoree

_CorExeMain

Sections

ar9e5^
Size: 11.7MB - Virtual size: 11.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ