2026-11-03_4045ecd445244339ccfd1fdd05ba316c_snatch

General

Target
2026-11-03_4045ecd445244339ccfd1fdd05ba316c_snatch
Size 1.8MB
Sample261104-2pexvsvydv
SHA256 04644ad0cd5138717faba34b11eb4400131f097f03e81105d35bb8955eb892db
MD5 4045ecd445244339ccfd1fdd05ba316c
SHA1 33e1ad529428f463f384a92a968b688b05c5812d
SHA512 5be7e97671c83b0e770149279b728fb34491998a8f0e069d675923a65794fe6587e9f5f8924db8113910d1c55e44e1eb19cbb8f12abc95dd7b068e9dd464a14d
SSDEEP 24576:t6pQPxQ2JyP2r5mJV91xM7RpbwgIve7Nxqw:tCqm2Jpr0nNM7Due7Nxd
TLSH
T162851802BCEA14FBC27CF27445966B213672346583336B871E8546AA5A76FE47F3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_4045ecd445244339ccfd1fdd05ba316c_snatch

SHA256 04644ad0cd5138717faba34b11eb4400131f097f03e81105d35bb8955eb892db
MD5 4045ecd445244339ccfd1fdd05ba316c
SHA1 33e1ad529428f463f384a92a968b688b05c5812d
SHA512 5be7e97671c83b0e770149279b728fb34491998a8f0e069d675923a65794fe6587e9f5f8924db8113910d1c55e44e1eb19cbb8f12abc95dd7b068e9dd464a14d
SSDEEP 24576:t6pQPxQ2JyP2r5mJV91xM7RpbwgIve7Nxqw:tCqm2Jpr0nNM7Due7Nxd
TLSH
T162851802BCEA14FBC27CF27445966B213672346583336B871E8546AA5A76FE47F3E310
MD5 SHA1 SHA512 SSDEEP TLSH

UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

344192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths