2024-08-20_7c3f6b270b42c904c58a937d494da740_poet-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_7c3f6b270b42c904c58a937d494da740_poet-rat_snatch
Size

9.5MB
MD5

7c3f6b270b42c904c58a937d494da740
SHA1

b04c9214e347eb3b59c06fc399c7e365e7127eb1
SHA256

ecbdcfbc2ca665c931381d2736f9c5d71441f4edc5dc235a638bb059c89ab5e4
SHA512

46e5f18418e0c0e1e793c470b2e44c85c4920eaaf7cf65da846d8014f49a77f9e0201a75ff3a1dc3a5ab887df0f4a6b7eee82fcdccc7a0e44d2dc4b154a3f35b
SSDEEP

98304:6vYgFsppvgw1DCQRarRmEuwAss/ELoj/mKDXSN1LD5XrRLzFlIw:6AgFqpBwQCjPs/Kg6VXZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_7c3f6b270b42c904c58a937d494da740_poet-rat_snatch

Files

2024-08-20_7c3f6b270b42c904c58a937d494da740_poet-rat_snatch
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 302KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 281B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 34B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1008KB - Virtual size: 1007KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 809KB - Virtual size: 809KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 4.4MB - Virtual size: 4.4MB

.data Size: 302KB - Virtual size: 434KB

/4 Size: 512B - Virtual size: 281B

/19 Size: 594KB - Virtual size: 593KB

/32 Size: 130KB - Virtual size: 130KB

/46 Size: 25KB - Virtual size: 24KB

/63 Size: 61KB - Virtual size: 61KB

/80 Size: 512B - Virtual size: 34B

/99 Size: 1008KB - Virtual size: 1007KB

/112 Size: 657KB - Virtual size: 657KB

/124 Size: 200KB - Virtual size: 200KB

.idata Size: 1024B - Virtual size: 1020B

.reloc Size: 303KB - Virtual size: 302KB

.symtab Size: 809KB - Virtual size: 809KB

.rsrc Size: 105KB - Virtual size: 104KB

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 4.4MB - Virtual size: 4.4MB

.data
Size: 302KB - Virtual size: 434KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 594KB - Virtual size: 593KB

/32
Size: 130KB - Virtual size: 130KB

/46
Size: 25KB - Virtual size: 24KB

/63
Size: 61KB - Virtual size: 61KB

/80
Size: 512B - Virtual size: 34B

/99
Size: 1008KB - Virtual size: 1007KB

/112
Size: 657KB - Virtual size: 657KB

/124
Size: 200KB - Virtual size: 200KB

.idata
Size: 1024B - Virtual size: 1020B

.reloc
Size: 303KB - Virtual size: 302KB

.symtab
Size: 809KB - Virtual size: 809KB

.rsrc
Size: 105KB - Virtual size: 104KB