2024-05-03_c9630c4ed88fffcf323c65e102eb9d9d_snatch

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-03_c9630c4ed88fffcf323c65e102eb9d9d_snatch
Size

18.4MB
MD5

c9630c4ed88fffcf323c65e102eb9d9d
SHA1

daf04c7714171f8c742c7688070e833bb98ee075
SHA256

f75a667460757d1d31dc11df99424836d28870b883d5414a223027ee6dc943e2
SHA512

3d97a78acd69b32d8ee83ba4448ec082e564a37d30c4f33bfce5163864a0e720bd5b3eb59ce27ce54bf231ae9808ac5be6b27a6cb20837a6a86d691db4f580e4
SSDEEP

196608:f+Kf/vx9oiqeESF+64Nwvjf27jYXg5gG+VbzFZhIZtxTyA6LMDOTbJWxED:/5dqeTju3YXg5gV1uvx6LM6Ix

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-03_c9630c4ed88fffcf323c65e102eb9d9d_snatch

Files

2024-05-03_c9630c4ed88fffcf323c65e102eb9d9d_snatch
.exe windows:6 windows x86 arch:x86

ca04e1e58d6a21ec254582373c84dfcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriority
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerA
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 373KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 281B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 864KB - Virtual size: 864KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 34B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 812KB - Virtual size: 816KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca04e1e58d6a21ec254582373c84dfcb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 6.6MB - Virtual size: 6.6MB

.data Size: 373KB - Virtual size: 477KB

/4 Size: 512B - Virtual size: 281B

/19 Size: 864KB - Virtual size: 864KB

/32 Size: 200KB - Virtual size: 200KB

/46 Size: 34KB - Virtual size: 34KB

/63 Size: 104KB - Virtual size: 103KB

/80 Size: 512B - Virtual size: 34B

/99 Size: 1.4MB - Virtual size: 1.4MB

/112 Size: 939KB - Virtual size: 938KB

/124 Size: 277KB - Virtual size: 276KB

.idata Size: 1024B - Virtual size: 990B

.symtab Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 812KB - Virtual size: 816KB

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 6.6MB - Virtual size: 6.6MB

.data
Size: 373KB - Virtual size: 477KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 864KB - Virtual size: 864KB

/32
Size: 200KB - Virtual size: 200KB

/46
Size: 34KB - Virtual size: 34KB

/63
Size: 104KB - Virtual size: 103KB

/80
Size: 512B - Virtual size: 34B

/99
Size: 1.4MB - Virtual size: 1.4MB

/112
Size: 939KB - Virtual size: 938KB

/124
Size: 277KB - Virtual size: 276KB

.idata
Size: 1024B - Virtual size: 990B

.symtab
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 812KB - Virtual size: 816KB