The Davetrap exe (Davetrap) Davetrap File Malware Analysis

The Davetrap.exe (Davetrap) File Analysis

Updated 1 month ago

Checked by Malware Check

Davetrap.exe

Hash Type	Value	Action
MD5	22a4b651b69b3791cbfd2ad866a10608
SHA1	e4687eb57edf8d3c7406d4f6c0ab88f1528fdc93
SHA256	71631ac8dc75641a17b7dc23838e56fa1f78f44cab810824c389e931da9231b6
SHA512	f2338275b5393d9993907290024ff64ef4bfa6ac48303fc78bd7d7011c7fba66d5cced2c0dd5c1f58aac364ef44252ae7ce40f93cfc01ff4c0188f4cd4bcb2d5
ImpHash	759a3c183e9207f0571ae8ae7b2a52e0

Hash Type

Value

Action

MD5

22a4b651b69b3791cbfd2ad866a10608

SHA1

e4687eb57edf8d3c7406d4f6c0ab88f1528fdc93

SHA256

71631ac8dc75641a17b7dc23838e56fa1f78f44cab810824c389e931da9231b6

SHA512

f2338275b5393d9993907290024ff64ef4bfa6ac48303fc78bd7d7011c7fba66d5cced2c0dd5c1f58aac364ef44252ae7ce40f93cfc01ff4c0188f4cd4bcb2d5

ImpHash

759a3c183e9207f0571ae8ae7b2a52e0

PE Analysis

Basic Information

▼

Icon	Hash: 5e680ade84d9b254ebde612256534447 Fuzzy: af0f7fee3789c4a2c0bedd74edcce324 dHash: 00b2726969b1b004
Image Base	`0x140000000`
Entry Point	`0x1405c4460`
Compilation Time	2025-10-23 23:49:40
Checksum	0x00000000 (Actual: 0x054e0764)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\a\_work\1\s\src\runtime\artifacts\obj\coreclr\windows.x64.Release\Corehost.Static\singlefilehost.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	17 libraries
Exports	44 functions
Resources	12 Resources
Sections	9 Sections

Version Information

▼

Translation	0x0000 0x04b0
CompanyName	Davetrap
FileDescription	Davetrap
FileVersion	2.6.0
InternalName	Davetrap.dll
LegalCopyright
OriginalFilename	Davetrap.dll
ProductName	Davetrap
ProductVersion	2.6.0
Assembly Version	2.6.0.0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	6,692,812 bytes	6,692,864 bytes	6.46 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F6C13793AE0C6928C35E6D0DA45BBD7`
`.CLR_UEF`	`0x00663000`	215 bytes	512 bytes	3.10 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`044B93FF1C654BEDE959F131756E796B`
`.rdata`	`0x00664000`	1,625,286 bytes	1,625,600 bytes	5.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`9611535D306B088051F40AE63D6CAD6D`
`.data`	`0x007f1000`	102,328 bytes	20,992 bytes	2.68 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B20D94CC06197757F964CC64AFC8F4F1`
`.pdata`	`0x0080a000`	233,616 bytes	233,984 bytes	6.47 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A3673B2BF5F073F02F345E450F5455C6`
`.didat`	`0x00844000`	56 bytes	512 bytes	0.42 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CA403F4AD6E0FCF060B1CAD65F0E6194`
`Section`	`0x00845000`	8 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x00846000`	1,465,296 bytes	1,465,344 bytes	6.19 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C4D216CA7A849074CF94957205C5CFCE`
`.reloc`	`0x009ac000`	30,952 bytes	31,232 bytes	5.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`783A79265428FB83C89BE8941BA0ABC6`

Resource Analysis

▼

Total Resources: 12 (1,464,427 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	109,286 bytes	7.5%
RT_RCDATA	3	1,351,592 bytes	92.3%
RT_GROUP_ICON	1	90 bytes	0%
RT_VERSION	1	700 bytes	0%
RT_MANIFEST	1	2,759 bytes	0.2%

Certificate Chain Analysis

▼

Certificate Information

Product	Davetrap
Description	Davetrap
File Version	2.6.0
Original Name	Davetrap.dll
Internal Name	Davetrap.dll

Certificate Chain Summary

Microsoft Windows Code Signing PCA 2024 #1 Primary

Validity Period: 2024-08-08 21:36:23 → 2035-06-23 22:04:01

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 1C 48 9F 81 DF A1 B0 B7 77 00 00 00 00 00 1C

.NET DAC #2 Chain

Validity Period: 2025-05-08 18:23:59 → 2026-05-06 18:23:59

Signature Algorithm: sha384RSA

Serial Number: 33 00 00 00 5D 70 ED 48 40 45 BA 82 3F 00 00 00 00 00 5D

Microsoft Time-Stamp Service #3 Chain

Validity Period: 2025-01-30 19:42:46 → 2026-04-22 19:42:46

Signature Algorithm: sha256RSA

Serial Number: 33 00 00 02 03 BB 1E 5C 00 38 6C 74 CA 00 01 00 00 02 03

Microsoft Time-Stamp PCA 2010 #4 Chain

Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25

Signature Algorithm: sha256RSA

Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	Davetrap.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.230.174
Database Version	2025-12-06 13:00:17 UTC

The Davetrap.exe (Davetrap) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification