2024-05-15_52493c48800347b6347d4674e0aade3b_snatch | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-15_52493c48800347b6347d4674e0aade3b_snatch
Size

7.7MB
MD5

52493c48800347b6347d4674e0aade3b
SHA1

0e8177e0cf706187409b117275e59f9384a0d90a
SHA256

4d0bfa44c458862547c660d407cfbb8ad0652047fb17263f282dd413168c4ce6
SHA512

4f7a29ccb5b229004c062ef1c62b742c44c5a36731e585a22353a19e0c36718a788e767d9474c22511fc8918071bd2bf81f6ddb48bb80a24dd7e3a171e5d3eb3
SSDEEP

98304:4uO8/XT6Fe3VQzjCGwY0+PhEugkpEhlDD:46GFuVQzdw9ugZlDD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-15_52493c48800347b6347d4674e0aade3b_snatch

Files

2024-05-15_52493c48800347b6347d4674e0aade3b_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 379KB - Virtual size: 946KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ