Behavioral task
behavioral1
Sample
2024-04-16_2c00f3e599d9b19b6586f0cf3fe1d7fe_china-chopper_jrat_snake.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_2c00f3e599d9b19b6586f0cf3fe1d7fe_china-chopper_jrat_snake.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-16_2c00f3e599d9b19b6586f0cf3fe1d7fe_china-chopper_jrat_snake
-
Size
1.5MB
-
MD5
2c00f3e599d9b19b6586f0cf3fe1d7fe
-
SHA1
9794fcdbd673ec8d68b159e560cec8435483edb8
-
SHA256
31f210e7e177fcea89f351f4f740163585aa4ce21ab7d58f9c8bd25630f0f503
-
SHA512
1c605faefcc60035449af1c8c7c16dfa879b3d8605e406862d6f96c8586df4fdd60bda8355496f9aafd43f94e2e89b56204035d2ca8c0f62edcbe475b63c2183
-
SSDEEP
12288:FO3b282QLpW529CxB7R/ahOHSk1Z4Mb9r5jGyU+aUguLPt:gb282QNM1B7R/ahZk1ThOUB
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-04-16_2c00f3e599d9b19b6586f0cf3fe1d7fe_china-chopper_jrat_snake
Files
-
2024-04-16_2c00f3e599d9b19b6586f0cf3fe1d7fe_china-chopper_jrat_snake.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ