2025-02-18_e5bd5434d2769abba057547204bfb3ab_poet-rat_snatch | Triage

Sharing

General

Target

2025-02-18_e5bd5434d2769abba057547204bfb3ab_poet-rat_snatch
Size

12.1MB
MD5

e5bd5434d2769abba057547204bfb3ab
SHA1

077a23a1bf27660ee455b8ed968676b3686081eb
SHA256

f836e7c3c9aa35de70ffac335dd4f9f97d13c8cb339823bb000f042f5cf9339c
SHA512

03ab956f4cdab003b2246b4d1065e17184aad83ea912f3585f0f5820826c63b0ab148d111eedb70ae69a356644579e79df71fdd0f943ada55a634ea8994a29d2
SSDEEP

196608:I+D5q1SGs2yRwtkpqShRBhR3hREhRwhR/hRLhRehRlhRB:DAkLRLRxRYRsRJRdR6RnRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-18_e5bd5434d2769abba057547204bfb3ab_poet-rat_snatch

Files

2025-02-18_e5bd5434d2769abba057547204bfb3ab_poet-rat_snatch
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ