General

  • Target
    2024-05-24_647d6197246392733cb5e38081daf8a2_snatch
  • Size 5.0MB
  • Sample240524-2qe91seb34
  • SHA256 209c5689179f329921d5a8ca8f645d6f34d947ed8525cab6a986bc2f1d8adc76
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-05-24_647d6197246392733cb5e38081daf8a2_snatch
    .exe 5.0MB

2024-05-24_647d6197246392733cb5e38081daf8a2_snatch

  • IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
  • SHA256 209c5689179f329921d5a8ca8f645d6f34d947ed8525cab6a986bc2f1d8adc76
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
6d:51:af:68:fd:3a:dc:a1:ed:13:40:14:fd:96:11:80:51:51:f8:27:52:f9:4e:ff:08:fc:28:ff:3c:3b:34:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Trend Micro\, Inc.,O=Trend Micro\, Inc.,L=Taipei,C=TW
Chains

Apr 30, 2024

Digest
6d:51:af:68:fd:3a:dc:a1:ed:13:40:14:fd:96:11:80:51:51:f8:27:52:f9:4e:ff:08:fc:28:ff:3c:3b:34:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Trend Micro\, Inc.,O=Trend Micro\, Inc.,L=Da’an District,ST=Taipei City,C=TW
Minor OS version
1
Major OS version
6
Entry point
421504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths