2024-10-29_a635774db67da3546b9dccd7f86e23b7_snatch_wapomi | Triage

Sharing

General

Target

2024-10-29_a635774db67da3546b9dccd7f86e23b7_snatch_wapomi
Size

1.9MB
MD5

a635774db67da3546b9dccd7f86e23b7
SHA1

5b598dae8e5bd153dc413d3b5a806ae51a05d963
SHA256

735f10f71e0e5e774d24d0a6047f152aaf3c231fc2cb1bd2ad4a681e3cf4cf33
SHA512

015daca7f8fef18502544b9a9b4c0b164c791e10ef6374b29d6341e88dfbcb3d87745b2eedc19f681b35a3039412e44d16dd856aa98e28c6758b3d41d6d6b176
SSDEEP

24576:r+aN0Icp9Z0apnK+3VOsTJMvBD5ABlciju4/ap2bLDWs5vHCng/OCTAe9dqHioLd:TNg4AIs1Mv+z1/2M9IHW+3gU11IBdWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-10-29_a635774db67da3546b9dccd7f86e23b7_snatch_wapomi

Files

2024-10-29_a635774db67da3546b9dccd7f86e23b7_snatch_wapomi
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.o]|�u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE