2024-09-12_b7e449d675132e01510cbea190456b8e_poet-rat_rex_snatch | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-12_b7e449d675132e01510cbea190456b8e_poet-rat_rex_snatch
Size

23.3MB
MD5

b7e449d675132e01510cbea190456b8e
SHA1

5a47ea8b631d77bb518eac69e10a9f7fb9c2f380
SHA256

e23c49da9609a4ec0ee99ada996ed6b2fc179e85f26374ca789628cbc65d376e
SHA512

529a5defea4dafdd99e30538729ed9651b2cd86d615eb192caae166b21fffd398911598dbccfd5fa02782aa3021ed22aed205e4e01517492a97020efc8dacb46
SSDEEP

98304:GosAEjNw+d5kD1iVQUzUMbcJsEWMFsKMF8WySb53mQXwSa:GosAsNTsiCUcWMFsKI8kb53mf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-12_b7e449d675132e01510cbea190456b8e_poet-rat_rex_snatch

Files

2024-09-12_b7e449d675132e01510cbea190456b8e_poet-rat_rex_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 516KB - Virtual size: 946KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ