Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_d812c868e8755f7cfb5fc796de45a0b7_china-chopper_snake.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-18_d812c868e8755f7cfb5fc796de45a0b7_china-chopper_snake.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-18_d812c868e8755f7cfb5fc796de45a0b7_china-chopper_snake
-
Size
1.1MB
-
MD5
d812c868e8755f7cfb5fc796de45a0b7
-
SHA1
818bd98160669bf7f85902a55e4bbd8bd938ce05
-
SHA256
304eef7c29d94cd0743822462b1533527671baf22e3bde4f998826cc374be67c
-
SHA512
0ef9feab5e7bab15ecd652acf16eeb676bb8651c9509c6a0c577336b4625c3e03fb48bd115c6722e78aa606be784c01d745c155c7bb7aadfcfe2c7118a1d8d5d
-
SSDEEP
12288:ZoPREd1f3lWRRsu8wu4Xawf+IlnRPOHjT:ZoPREd1f3lWRRqjErf+IPPOHf
Malware Config
Signatures
-
Detects ransomware indicator 1 IoCs
resource yara_rule sample SUSP_RANSOMWARE_Indicator_Jul20 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-18_d812c868e8755f7cfb5fc796de45a0b7_china-chopper_snake
Files
-
2024-01-18_d812c868e8755f7cfb5fc796de45a0b7_china-chopper_snake.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ