Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_4a44a1d2184e7e2392884d64df8f6e28_china-chopper_gh0st_snake.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_4a44a1d2184e7e2392884d64df8f6e28_china-chopper_gh0st_snake.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-16_4a44a1d2184e7e2392884d64df8f6e28_china-chopper_gh0st_snake
-
Size
2.4MB
-
MD5
4a44a1d2184e7e2392884d64df8f6e28
-
SHA1
580bae6d19b8d70aba1f51895dcd35cd5f9a84ab
-
SHA256
cd445e8688ff8e799e66eb5e38a79c6ec762e95ea31c44d92c8df294734da2d7
-
SHA512
9ef376c9a669a222d83f6fbe75a34b8d22c261a5f7667c5d221c05ba4c26ecbd819fdd333f3cfb52c0e7c65385203f792c1bfcb80f11f3b01a909071c7878360
-
SSDEEP
24576:+nH8pYQHpLysq756xvLXrpeotOYRImouTSq470d2bxK10c:EYLxdqsjrk0v/AO2bxK1Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-16_4a44a1d2184e7e2392884d64df8f6e28_china-chopper_gh0st_snake
Files
-
2024-04-16_4a44a1d2184e7e2392884d64df8f6e28_china-chopper_gh0st_snake.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ