General

  • Target

    Dispam.exe

  • Size

    12.1MB

  • MD5

    7d8daea6a208af50941ab57c5a176c44

  • SHA1

    5367284f1b03462f87419a9025a9bfb15be6a450

  • SHA256

    666d92fa33d00d2f3b576c1637be663fc5a27362f198174f523a0c5d1aeef3c2

  • SHA512

    1703d876760bdb8391be11708346d1b451eb7cde274a757f0adc5f3b6813ca99015d9630a863bf8d2f61187b86a8b10d3956451f13de79695611a1f3f11bf395

  • SSDEEP

    393216:0GV2CSQhZ2YsHFUK2Jn1+TtIiFQS2NXNsI8VbTToP:TYQZ2YwUlJn1QtIm28IKzo

Score
666/10

Malware Config

Signatures

  • DoomRat 1 IoCs

    DoomRat is malware that downloads rats from the tria.ge API.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Dispam.exe
    .exe windows:6 windows x64 arch:x64

    ba2fe82dbe3fc8bdddc26ef88c3ef15a


    Headers

    Imports

    Sections

  • Dispam.pyc