2024-08-02_d679809bb083f1b788a049353ebc3ed1_poet-rat_snatch | Triage

Sharing

General

Target

2024-08-02_d679809bb083f1b788a049353ebc3ed1_poet-rat_snatch
Size

5.8MB
MD5

d679809bb083f1b788a049353ebc3ed1
SHA1

ef31a47f558f183c8d8bf2881ab39a4aa7c24863
SHA256

ef371e2621b6861df0e001ea07f996e457a8a1950f68b8bd1a006d0507898fd2
SHA512

ccdef692d5abf4b4d5e373db86851a6fc42827d7d3a227e38b5055df1fc83b1374b3cf94074e515503e76489a796b8bb40989bc947ed7609ebf26bf1aef0a0e6
SSDEEP

98304:OEWVQsHEwUh0ucrf94k942iAwl55OqlpiWmj4R:GVQsHTUB7GKlXlpi/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-02_d679809bb083f1b788a049353ebc3ed1_poet-rat_snatch

Files

2024-08-02_d679809bb083f1b788a049353ebc3ed1_poet-rat_snatch
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ