2024-09-02_2353cee4d8a3362188fdbacab9405775_poet-rat_rex_snatch | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-02_2353cee4d8a3362188fdbacab9405775_poet-rat_rex_snatch
Size

23.4MB
MD5

2353cee4d8a3362188fdbacab9405775
SHA1

c2a5a234883a70afba3d119691c8e7f7cc598027
SHA256

d30400560a150912bf5c310628241fb06b36b4425ffa5167ec66555c554a54e0
SHA512

a4302bd8cf1abf8569e96dac58c9d00da4d2d1dca37c1c7ddd1318295568f14956028fe988b01f4e6047d878684facfc0d74d9ab7f16363153b78a411ee8bebc
SSDEEP

98304:AGwlbkEca5PQfvC9aVYuCJC9NEiM1sKOv/120kd:AGwq05IrYuCniM1sKA/A0kd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-02_2353cee4d8a3362188fdbacab9405775_poet-rat_rex_snatch

Files

2024-09-02_2353cee4d8a3362188fdbacab9405775_poet-rat_rex_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 517KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ