2025-02-18_cc3b458540136770be5d5775f0d44f66_poet-rat_snatch | Triage

Sharing

General

Target

2025-02-18_cc3b458540136770be5d5775f0d44f66_poet-rat_snatch
Size

12.9MB
MD5

cc3b458540136770be5d5775f0d44f66
SHA1

6253d690cf1aeef7cf0d14395e82ddb347dd5bc6
SHA256

6710fd52a418adfb6338960abe79ea7793b15aba5c241776a10ea5d17c397cf3
SHA512

200493457cf0dd0487514b0d9d344771889a38a88812c606ba5246d1676cdc15d70791e81ef9ba9cb00713f49c7ac0433c7f712d1093ddb7e27001ed08122c67
SSDEEP

196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRFhRVhRihRrhRihREhR3:DAkLRLRxRYRHRXRGR9RGRYR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-18_cc3b458540136770be5d5775f0d44f66_poet-rat_snatch

Files

2025-02-18_cc3b458540136770be5d5775f0d44f66_poet-rat_snatch
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ