2024-06-15_d10e0387e3d55dc1f82c23719e2b168b_snatch | Triage

Sharing

General

Target

2024-06-15_d10e0387e3d55dc1f82c23719e2b168b_snatch
Size

2.0MB
MD5

d10e0387e3d55dc1f82c23719e2b168b
SHA1

4abf55c3ea6d3bf098a98fe3d9c2895fd5648e04
SHA256

88dc4a9c852697cff3b9e0d654d20feb8772fdcddb989eabac12b7cfad6e9b64
SHA512

cce2a42d7311d8d7d924566732c876a683dcbeab71e24a8d39eab9ec3de6cf2d9a9a71349620799fca222041c83bb4b529763cc5aa5fc4f57088ec2d617861c2
SSDEEP

49152:+ddZjtDrb/TyvO90dL3BmAFd4A64nsfJ7j7TPtGcddRgLj2Dau/oZzQFz1j:+dfj7zyg5oo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-15_d10e0387e3d55dc1f82c23719e2b168b_snatch

Files

2024-06-15_d10e0387e3d55dc1f82c23719e2b168b_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 973KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 903KB - Virtual size: 903KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ