NitroRansomware[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NitroRansomware.exe
Size

1.0MB
MD5

0155c16c31c47c8eacac2aeaeffc7110
SHA1

a2f711db5967b3af22599b4050e30aba55c8b2c8
SHA256

f965711af28f8ae6709f104a05c8b62ff3d7917d7d88fdd2e57b00bd3f2beb2a
SHA512

ee32bf5d759184ccf175cd62e5b195f1e8d26a7b6db83ff69055fe971f81266ff42a8704a3e7fe9fbe1ef2365f32facb77bc2fdb7bf3680227ea60e56437263e
SSDEEP

24576:eKYGGjodngwtlaHxN8KUWVe6tw2wvKhLnt1:eKYG2odngwwHv5VbtHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NitroRansomware.exe

Files

NitroRansomware.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ