Behavioral task
behavioral1
Sample
2024-04-16_69feb18ff76b75f3c9a79b21510f1284_china-chopper_jrat_snake.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_69feb18ff76b75f3c9a79b21510f1284_china-chopper_jrat_snake.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-16_69feb18ff76b75f3c9a79b21510f1284_china-chopper_jrat_snake
-
Size
1.5MB
-
MD5
69feb18ff76b75f3c9a79b21510f1284
-
SHA1
b6610d4b4ca90ddd89845cad8e22b39fcc7feedc
-
SHA256
00030730930b2264da8d8661e489b8a3b61331c8a1bc85cb75b9fb838d1aff96
-
SHA512
2bfaae7413fd430eee127fb957cc10645a53706220c3d4e4b4d4147b8d78d04963bee4490733928988eff2e840bd4a7210ccdbf7cb5e6d7c13fdb94f7536197c
-
SSDEEP
12288:FO3b282QxpW529CxwHWkHzkbZ4Eb9r5CGyU+aUguLPv:gb282QDM1qWukbLhpUb
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-04-16_69feb18ff76b75f3c9a79b21510f1284_china-chopper_jrat_snake
Files
-
2024-04-16_69feb18ff76b75f3c9a79b21510f1284_china-chopper_jrat_snake.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ