2024-10-01_1f142017eef397c18440fc2741c9349d_poet-rat_snatch

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-01_1f142017eef397c18440fc2741c9349d_poet-rat_snatch
Size

6.0MB
MD5

1f142017eef397c18440fc2741c9349d
SHA1

fba4f7d5e17c7e728cf7b195384de8c75604d9c0
SHA256

41de948aa88dfedc3203eee13558086339a1df7030e3562b7cf0d197aa9fbb1e
SHA512

0634bccaa6b1183437fe084902215dab4a98e6a570fbc392f9546348619fe82759fa216bf903065568ba7cafa71dd8082d8dd4a206f016cd71331164d7b34ec4
SSDEEP

49152:hvYXA4nNyxH02VsKyvYnx5V94/PTBKaEbG7RStekK3XCH7XGxjO0B1W2R1lziSok:hvYrNwH06xnxdMSKJxfR7IAlvPn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-01_1f142017eef397c18440fc2741c9349d_poet-rat_snatch

Files

2024-10-01_1f142017eef397c18440fc2741c9349d_poet-rat_snatch
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/65
Size: 812KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/78
Size: 583KB - Virtual size: 583KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/90
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 237KB - Virtual size: 415KB

/4 Size: 512B - Virtual size: 295B

/19 Size: 415KB - Virtual size: 415KB

/32 Size: 70KB - Virtual size: 70KB

/46 Size: 512B - Virtual size: 48B

/65 Size: 812KB - Virtual size: 811KB

/78 Size: 583KB - Virtual size: 583KB

/90 Size: 168KB - Virtual size: 168KB

.idata Size: 1024B - Virtual size: 988B

.reloc Size: 98KB - Virtual size: 97KB

.symtab Size: 308KB - Virtual size: 308KB

.rsrc Size: 420KB - Virtual size: 420KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 237KB - Virtual size: 415KB

/4
Size: 512B - Virtual size: 295B

/19
Size: 415KB - Virtual size: 415KB

/32
Size: 70KB - Virtual size: 70KB

/46
Size: 512B - Virtual size: 48B

/65
Size: 812KB - Virtual size: 811KB

/78
Size: 583KB - Virtual size: 583KB

/90
Size: 168KB - Virtual size: 168KB

.idata
Size: 1024B - Virtual size: 988B

.reloc
Size: 98KB - Virtual size: 97KB

.symtab
Size: 308KB - Virtual size: 308KB

.rsrc
Size: 420KB - Virtual size: 420KB