Dope[.]exe | Triage

Sharing

General

Target

Dope.exe
Size

253KB
MD5

e12f42043891bf5ac2e710929b51f6ae
SHA1

5898cbc203fdd62310ae2011d19339a071cfcfa8
SHA256

92baa452554f0bdac10f889a2af9421157b8f9d4ef445649ec1d5a1890e38094
SHA512

a4886fd0ede67005fdbf3b47efbb74524c5bcfc10e15211dd4b76e9920c507ffac34efa5e03dcd5f82da1c91973d0f499025754ebb4e00442733af9c10441907
SSDEEP

3072:aWtWF7bdNN5ylLzMhu6/zRLq4XJPhEKuEkHBA4dtBA4dC0:XtSPN5ughuaLq6SBA4vBA4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dope.exe

Files

Dope.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\SSVERIFY\Desktop\DopeDev-main\Dope\Dope\obj\Debug\Dope.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ