General
-
Target
2025-04-14_cf8dc4367be0aba84c24f7f2d43679be_luca-stealer_ngrbot_poet-rat_snatch
-
Size
15.0MB
-
MD5
cf8dc4367be0aba84c24f7f2d43679be
-
SHA1
04e42ba38e73d1287dfa8b64d05c0ef61ac1f084
-
SHA256
d27a2029f437560c94168cb2f68515f47bd8020bd7340b7c2dc36bca815a4ae3
-
SHA512
b36812e94f4724694a81e4eaf5471dd482c590a9b752bb41b80401c8c821b3ca97e61ec0681240b6d3c1a4a9417199da9fc45d301b84b83862094cea23937a64
-
SSDEEP
196608:SE63/+0UJ3fBnnd26Aa+3Fky+nBV1V8+58X8UDcAaqe0cc:TW/7UF2c+3FP+RVhuXXEc
Malware Config
Signatures
Files
-
2025-04-14_cf8dc4367be0aba84c24f7f2d43679be_luca-stealer_ngrbot_poet-rat_snatch.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: 7.7MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ