2024-06-23_ad29751ee5a92ba9db70d6609e347e88_poet-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-23_ad29751ee5a92ba9db70d6609e347e88_poet-rat_snatch
Size

6.7MB
MD5

ad29751ee5a92ba9db70d6609e347e88
SHA1

cd10ddaa1eff95bfefd66df34c2890b05a75edaa
SHA256

8ac8827fc3512ce4a86379c9daca7af179b34a598a910aa728228b37ea33fa6a
SHA512

bb9bfd5d4800c811836c9f77f07453e186008d39790a3194becad523de8a3b780df7621b5a4d406c77039948b2da86312904abe95dd720d55be26500325a8b24
SSDEEP

98304:dznBoB/8gYCBXITlCXiGFXsw3AXizQLHLXKKh9beFJ:dnBoV8gYCB4Tl2i2cezQLHLXKKr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-23_ad29751ee5a92ba9db70d6609e347e88_poet-rat_snatch

Files

2024-06-23_ad29751ee5a92ba9db70d6609e347e88_poet-rat_snatch
.exe windows:4 windows x64 arch:x64

1c2a6fbef41572f4c9ce8acb5a63cde7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeEndPeriod
timeBeginPeriod

ws2_32

WSAGetOverlappedResult

kernel32

WriteFile
WriteConsoleW
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
LoadLibraryA
LoadLibraryW
GetSystemInfo
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 276B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 34B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 325KB - Virtual size: 324KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c2a6fbef41572f4c9ce8acb5a63cde7

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 2.5MB - Virtual size: 2.5MB

.data Size: 256KB - Virtual size: 384KB

/4 Size: 512B - Virtual size: 276B

/19 Size: 291KB - Virtual size: 290KB

/32 Size: 75KB - Virtual size: 75KB

/46 Size: 17KB - Virtual size: 17KB

/63 Size: 36KB - Virtual size: 36KB

/80 Size: 512B - Virtual size: 34B

/99 Size: 505KB - Virtual size: 505KB

/112 Size: 325KB - Virtual size: 324KB

/124 Size: 113KB - Virtual size: 112KB

.idata Size: 1KB - Virtual size: 1KB

.symtab Size: 412KB - Virtual size: 412KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 2.5MB - Virtual size: 2.5MB

.data
Size: 256KB - Virtual size: 384KB

/4
Size: 512B - Virtual size: 276B

/19
Size: 291KB - Virtual size: 290KB

/32
Size: 75KB - Virtual size: 75KB

/46
Size: 17KB - Virtual size: 17KB

/63
Size: 36KB - Virtual size: 36KB

/80
Size: 512B - Virtual size: 34B

/99
Size: 505KB - Virtual size: 505KB

/112
Size: 325KB - Virtual size: 324KB

/124
Size: 113KB - Virtual size: 112KB

.idata
Size: 1KB - Virtual size: 1KB

.symtab
Size: 412KB - Virtual size: 412KB

.rsrc
Size: 15KB - Virtual size: 15KB