2024-05-05_a63fa9d29d2302457d175215a7611428_snatch

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-05_a63fa9d29d2302457d175215a7611428_snatch
Size

8.9MB
MD5

a63fa9d29d2302457d175215a7611428
SHA1

c58c8f77d289c07a11d965bcab6666cb176034c5
SHA256

ffe01895f55335667b5228acf74f92515ae76ff2461481c2622a54b3aabc1d9f
SHA512

c5231a19ea753364d795fcb675af4296a0fd54563914e634953a8009b838ac7eb303c2896bcfe45502ae672878049c013dc6db4947f871dd9cea5492a7cc313a
SSDEEP

98304:/eDSHbBxHXvEkbSDr4UnOjqq+OTOEukyFu9Ojw17oj7:/F3fZkObdTrf19OjA7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-05_a63fa9d29d2302457d175215a7611428_snatch

Files

2024-05-05_a63fa9d29d2302457d175215a7611428_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 372KB - Virtual size: 767KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 281B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/65
Size: 1006KB - Virtual size: 1006KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 651KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: 372KB - Virtual size: 767KB

/4 Size: 512B - Virtual size: 281B

/19 Size: 557KB - Virtual size: 557KB

/32 Size: 115KB - Virtual size: 115KB

/46 Size: 512B - Virtual size: 64B

/65 Size: 1006KB - Virtual size: 1006KB

/78 Size: 651KB - Virtual size: 650KB

/90 Size: 171KB - Virtual size: 170KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 150KB - Virtual size: 149KB

.symtab Size: 556KB - Virtual size: 556KB

.rsrc Size: 1024B - Virtual size: 984B

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 372KB - Virtual size: 767KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 557KB - Virtual size: 557KB

/32
Size: 115KB - Virtual size: 115KB

/46
Size: 512B - Virtual size: 64B

/65
Size: 1006KB - Virtual size: 1006KB

/78
Size: 651KB - Virtual size: 650KB

/90
Size: 171KB - Virtual size: 170KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 150KB - Virtual size: 149KB

.symtab
Size: 556KB - Virtual size: 556KB

.rsrc
Size: 1024B - Virtual size: 984B