Snarl 3[.]1[.]0[.]exe

Resubmissions

24/10/2026, 07:47

261024-jmq81axy5m

24/10/2026, 07:26

261024-h9zcfsgv9y3

Sharing

Copy URL Twitter E-mail

General

Target
Snarl 3.1.0.exe
Size 262.3MB
Sample261024-jmq81axy5m
SHA256 765846515ed5b9a2569aacdf3b1aa46233b0461f4564564292d370e465cb0872
MD5 0b16c95de969bc409d03099506c4c71c
SHA1 9e39cc286553a70877a5dce24e201c16e7ad61e4
SHA512 cef5d24cbbe8aeabe92869176209412f140da18a8fdbd75b4a2a7adc3084c503d37ba96b368d189e443c3dc5f7786ff96fd624ea8677778cf85f235a56231142
SSDEEP 6291456:GraCXqNbaA0JyP77yTBm974pS9eRFYyIQC99lLgQSp+p:GraVbb0JCvydQ+QeRGyIQolLgRp+p
TLSH
T1C0D823C669D191E9C3D1C934C60A6BDAF1913976CE34682B7FCA91022F30ED5C8E5F26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Snarl 3.1.0.exe

File Explorer

Snarl 3.1.0.exe

.exe 262.3MB

Snarl 3.1.0.exe

IMPHASH 8706b4bced0801b4aca827040d1c2809
SHA256 765846515ed5b9a2569aacdf3b1aa46233b0461f4564564292d370e465cb0872
MD5 0b16c95de969bc409d03099506c4c71c
SHA1 9e39cc286553a70877a5dce24e201c16e7ad61e4
SHA512 cef5d24cbbe8aeabe92869176209412f140da18a8fdbd75b4a2a7adc3084c503d37ba96b368d189e443c3dc5f7786ff96fd624ea8677778cf85f235a56231142
SSDEEP 6291456:GraCXqNbaA0JyP77yTBm974pS9eRFYyIQC99lLgQSp+p:GraVbb0JCvydQ+QeRGyIQolLgRp+p
TLSH
T1C0D823C669D191E9C3D1C934C60A6BDAF1913976CE34682B7FCA91022F30ED5C8E5F26
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15369488

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcrypt

BCryptCloseAlgorithmProvider BCryptDestroyKey BCryptEncrypt BCryptGenerateSymmetricKey BCryptGetProperty BCryptOpenAlgorithmProvider BCryptSetProperty

ntdll

NtQuerySystemInformation NtQuerySystemTime RtlAdjustPrivilege RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind

advapi32

AdjustTokenPrivileges CloseServiceHandle ControlService GetTokenInformation GetUserNameW LookupPrivilegeValueW OpenProcessToken OpenSCManagerW OpenServiceW QueryServiceStatus RegCloseKey RegCreateKeyExW RegDeleteTreeW RegGetValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW StartServiceW

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetTimeouts

shell32

ShellExecuteExW ShellExecuteW

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

d2d1

ord1

dwrite

DWriteCreateFactory

ole32

CoCreateInstance CoInitializeEx CoUninitialize CreateStreamOnHGlobal

user32

AdjustWindowRectExForDpi ClipCursor CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EmptyClipboard FindWindowA FindWindowW GetActiveWindow GetClientRect GetClipboardData GetCursorPos GetDC GetDpiForSystem GetDpiForWindow GetKeyState GetMonitorInfoW GetSystemMetrics GetWindowLongPtrW GetWindowRect GetWindowThreadProcessId LoadCursorW MapWindowPoints MonitorFromPoint MonitorFromWindow MsgWaitForMultipleObjects OpenClipboard PeekMessageW PostMessageW PostQuitMessage RegisterClassExW ReleaseCapture ReleaseDC ScreenToClient SetCapture SetClipboardData SetCursor SetProcessDpiAwarenessContext SetWindowLongPtrW SetWindowPos ShowCursor ShowWindow TrackMouseEvent TranslateMessage UpdateWindow

gdi32

CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetDIBits SelectObject SetBrushOrgEx SetStretchBltMode StretchBlt

gdiplus

GdipAlloc GdipCloneImage GdipCreateBitmapFromScan0 GdipDisposeImage GdipFree GdipGetImageEncoders GdipGetImageEncodersSize GdipSaveImageToStream GdiplusStartup

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

dwmapi

DwmEnableBlurBehindWindow DwmExtendFrameIntoClientArea DwmSetWindowAttribute

dcomp

DCompositionCreateDevice

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

kernel32

AcquireSRWLockExclusive CheckRemoteDebuggerPresent CloseHandle CreateDirectoryW CreateEventW CreateFile2 CreateFileW CreatePipe CreateProcessW CreateThread CreateToolhelp32Snapshot DecodePointer DeleteCriticalSection DeleteFileW DeviceIoControl EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindFirstFileW FindNextFileW FindResourceW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileAttributesExW GetFileInformationByHandleEx GetFileSizeEx GetFileType GetLastError GetLocaleInfoEx GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetOverlappedResult GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetSystemWindowsDirectoryW GetTempPathW GetTickCount GetUserDefaultLCID GetUserDefaultUILanguage GetVolumeInformationW GlobalAlloc GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitOnceBeginInitialize InitOnceComplete InitializeCriticalSectionEx InitializeSListHead InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale K32EnumDeviceDrivers K32GetDeviceDriverBaseNameA LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadResource LocalFree LockResource MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringW PeekNamedPipe Process32FirstW Process32NextW QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive SetEndOfFile SetFileInformationByHandle SetFilePointerEx SetHandleInformation SetLastError SetStdHandle SetUnhandledExceptionFilter SizeofResource Sleep SleepConditionVariableSRW SystemTimeToFileTime TerminateProcess UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle

Name

.text

Size

14.9MB

Virtual Size

14.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

178KB

Virtual Size

222KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

135KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shash

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.#yU

Size

226.5MB

Virtual Size

226.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

19.1MB

Virtual Size

19.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Snarl 3.1.0.exe

bcrypt

ntdll

advapi32

winhttp

shell32

api-ms-win-shcore-scaling-l1-1-1

d2d1

dwrite

ole32

user32

gdi32

gdiplus

d3d11

dxgi

dwmapi

dcomp

imm32

d3dcompiler_47

kernel32

api-ms-win-core-synch-l1-2-0

generic