snakebot | eca3684f68d645ee6e591345e53f514f15e88c2de59248a9c95895b56b24ff46 | Triage

Sharing

General

Target

eca3684f68d645ee6e591345e53f514f15e88c2de59248a9c95895b56b24ff46
Size

454KB
MD5

fd14c17e1c5f6a0f03efd69865af68f0
SHA1

1bb42707c96bb9bc95682a4cca08cf635ed99cd1
SHA256

eca3684f68d645ee6e591345e53f514f15e88c2de59248a9c95895b56b24ff46
SHA512

d6faedcd03e2affd903cda838ec3bd10ac3999860147a329ad21c2ad89f016b227763349c0229f7ac1e5856946a13e68625daebfd8a852492ec9ac5e92ed0531
SSDEEP

12288:tB8y5C8N00d6isCzbzBxI8S9Qb9lg/DzTgnMlRbJzGk5:DbU8Ow6i3zbtxI8Smbny/guLCk5

Score

10^/10

snakebot snakebot

Malware Config

Signatures

Snakebot family
snakebot

Contains SnakeBOT related strings 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/Products.exe	snakebot_strings

Files

eca3684f68d645ee6e591345e53f514f15e88c2de59248a9c95895b56b24ff46
.rar
Products.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

MhGdB2
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ