Static task
static1
Behavioral task
behavioral1
Sample
2024-09-11_569122c9ff2d560dbb6d686dbf90d5d8_andromeda_jrat_snake_webshell-shell.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-11_569122c9ff2d560dbb6d686dbf90d5d8_andromeda_jrat_snake_webshell-shell.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-11_569122c9ff2d560dbb6d686dbf90d5d8_andromeda_jrat_snake_webshell-shell
-
Size
3.0MB
-
MD5
569122c9ff2d560dbb6d686dbf90d5d8
-
SHA1
b45440d80a3447cee3ab43b3b96086eebec80e16
-
SHA256
b23ffd1200057eaaa4892148cfe5c6418d4ced52480499ab5f5f41633c99f83c
-
SHA512
65d82507991c60b7ef11dd7106f89bf7b38de604cc909c32b0f7f4471c70ff983ad9361043d43efa26106295584a7bcd0528dadb7fe7e184d58a7e9328a1aac8
-
SSDEEP
24576:E7IOwBaCoVGxMqIALJBPfYeh11wetFYv7M4pjiBbwMN2XfxJ2:EbwcqB7LzfYWz6vubwMN2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-11_569122c9ff2d560dbb6d686dbf90d5d8_andromeda_jrat_snake_webshell-shell
Files
-
2024-09-11_569122c9ff2d560dbb6d686dbf90d5d8_andromeda_jrat_snake_webshell-shell.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ