2024-07-09_6fd2d798476882f6fbbc63c7136e9e32_poet-rat_snatch | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-09_6fd2d798476882f6fbbc63c7136e9e32_poet-rat_snatch
Size

15.6MB
MD5

6fd2d798476882f6fbbc63c7136e9e32
SHA1

c1b21b0388b4f031d06b8a4394e7984434fe5684
SHA256

f58a63e7d7a68cafba259d196c62084cba4647b78d60d138e3a62f896b779122
SHA512

fa93dbf22ae99669e433cfc6491d729445e5fc7056f6ade7819a3a0251efaa61e753dc75c708b464e9bae849aa9b385b049bdc85affdbcc5fe10365e96af9eb9
SSDEEP

98304:pbil3gV0qpUxmotPGOzxTzxIZrWY+EKzWI/REiZGZBRA5RALraX:pbil3gtUtPGOdTzx6r6EKzWayiI/C5C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-09_6fd2d798476882f6fbbc63c7136e9e32_poet-rat_snatch

Files

2024-07-09_6fd2d798476882f6fbbc63c7136e9e32_poet-rat_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ