2024-09-06_b7259bf36d34ca30f037367c3ff50085_poet-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_b7259bf36d34ca30f037367c3ff50085_poet-rat_snatch
Size

4.8MB
MD5

b7259bf36d34ca30f037367c3ff50085
SHA1

8a729ea41db61dadd27cfb0ce5557640f811a3b1
SHA256

cfbb24f27c598a594854ff4ec09cfc8837a160ce7ed3ab157c52f2a09fd6fa66
SHA512

2440e05c87d94feecd5ca4009e162b1605b427957f5b88c4599b96cdee1b88aa4b9a7acdb7ddb9b346c486ac60a8ab394ff01281965820c8dbaa2484bf716dcc
SSDEEP

49152:3CVZ+Yi+Y3zllrb/TYvO90d7HjmAFd4A64nsfJVAOyU9wt4MSWMGjEKWwxxOxODD:3PH3zlZAp8xG8Em433TSVLn24WW7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_b7259bf36d34ca30f037367c3ff50085_poet-rat_snatch

Files

2024-09-06_b7259bf36d34ca30f037367c3ff50085_poet-rat_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/65
Size: 546KB - Virtual size: 546KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 1.8MB - Virtual size: 1.8MB

.data Size: 147KB - Virtual size: 514KB

/4 Size: 512B - Virtual size: 295B

/19 Size: 318KB - Virtual size: 317KB

/32 Size: 62KB - Virtual size: 61KB

/46 Size: 512B - Virtual size: 48B

/65 Size: 546KB - Virtual size: 546KB

/78 Size: 426KB - Virtual size: 425KB

/90 Size: 106KB - Virtual size: 106KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 32KB - Virtual size: 32KB

.symtab Size: 244KB - Virtual size: 244KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 147KB - Virtual size: 514KB

/4
Size: 512B - Virtual size: 295B

/19
Size: 318KB - Virtual size: 317KB

/32
Size: 62KB - Virtual size: 61KB

/46
Size: 512B - Virtual size: 48B

/65
Size: 546KB - Virtual size: 546KB

/78
Size: 426KB - Virtual size: 425KB

/90
Size: 106KB - Virtual size: 106KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 32KB - Virtual size: 32KB

.symtab
Size: 244KB - Virtual size: 244KB