Overview

overview

10

Static

static

10

DoomRat.exe

windows10-1703-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    DoomRat.exe
  • Size 12.1MB
  • Sample240920-v722saydnf
  • SHA256 94bd1fa65b9ee3fe4be830326ebcd918609ee260797391d1af8aa4ac470cce3f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
pyinstalleradware antivm apt backdoor banker bootkit botnet clipper collection crypter discovery downloader dropper evasion exploit exploiter fakeav ics infostealer keylogger loader maldoc miner overlay persistence ransomware rat rootkit spam spreader spyware stealer trojan wiper worm doom pc fuckerdoomrat

Malware Config

Signatures

File Explorer

  • DoomRat.exe
    .exe 12.1MB
  • Dispam.pyc
    271B

DoomRat.exe

  • IMPHASH ba2fe82dbe3fc8bdddc26ef88c3ef15a
  • SHA256 94bd1fa65b9ee3fe4be830326ebcd918609ee260797391d1af8aa4ac470cce3f
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx64arch:x64

  • Detects Pyinstaller

    pyinstaller

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
46288
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths