2024-09-19_e39f0b1dc6b2388675aaaf87e5711763_poet-rat_snatch | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-19_e39f0b1dc6b2388675aaaf87e5711763_poet-rat_snatch
Size

44.6MB
MD5

e39f0b1dc6b2388675aaaf87e5711763
SHA1

b08c50405ae16fa39bd6a89fcd06f7283e3e3a41
SHA256

5a867bbf56ed8c8414b2224f58f74bf47bfce6fccc60658db07e5644351bee89
SHA512

b52f8b46ae087192287ab3aaaa89d0fab1b44dc1823f1b271bcdbe727c93048a4d047cd7e20338923a4498e23d08262c479d75d258438c8ffa4429f8dc40cbbc
SSDEEP

196608:QHMtNrWRfRXa80mkdwxJujNXXfmFcW7bDoleVVB71pvdtxzJpWW8Gcg1H1gRor2T:1tSfRK+JYXCcWvPrjWN8H+urtu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-19_e39f0b1dc6b2388675aaaf87e5711763_poet-rat_snatch

Files

2024-09-19_e39f0b1dc6b2388675aaaf87e5711763_poet-rat_snatch
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 44.6MB - Virtual size: 44.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE