2024-07-08_39a7189cf2ef50047cec299766a8ada6_poet-rat_snatch | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-08_39a7189cf2ef50047cec299766a8ada6_poet-rat_snatch
Size

14.6MB
MD5

39a7189cf2ef50047cec299766a8ada6
SHA1

867956228f37c5c6fbf63e5edfc6eb187e8fc520
SHA256

91e4448d68474262e1f52ba687ded3fce3344514b0eb043245e9c9e2433b8932
SHA512

95c0c8231b5cc3895dba97ad2a0306c1a53b4f698007624afd2a04701738f3db9a6906c441caed1a4e397b1198e89958dff0d78c2ce2d92b1d5b94e3558f1cda
SSDEEP

98304:6V/hGmbmP6efA47JLFtM3jzlFSY9+vk/nuyjsrUlOCvX4PJ:0/sMGdfJJMj5l4ynuK5lk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-08_39a7189cf2ef50047cec299766a8ada6_poet-rat_snatch

Files

2024-07-08_39a7189cf2ef50047cec299766a8ada6_poet-rat_snatch
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 201KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ