2025-02-18_a8a2bf605471ce7efcd4079c7bd1c025_poet-rat_snatch | Triage

Sharing

General

Target

2025-02-18_a8a2bf605471ce7efcd4079c7bd1c025_poet-rat_snatch
Size

12.0MB
MD5

a8a2bf605471ce7efcd4079c7bd1c025
SHA1

af22d6f0001caf435c4400dab951e268aba928d9
SHA256

8daa9f2226a8ebe550f05cfcc62aa874141a6b7ded1ede567d89ba3f5b5d1b61
SHA512

43146c9a12243a5af7400ffce177440ec529642e397b00cb9c8ff85dd381bbdd4b75462d546e745c45dd9418a0e2496113253f2c5991560ae1d6458bc5cc5207
SSDEEP

196608:I+D5q1SGs2yRwtkpqShRBhR3hRMhRbhRKhRuhRqhR1hRLhR8:DAkLRLRxRwRtReRKR+R3RdR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-18_a8a2bf605471ce7efcd4079c7bd1c025_poet-rat_snatch

Files

2025-02-18_a8a2bf605471ce7efcd4079c7bd1c025_poet-rat_snatch
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ