Static task
static1
Behavioral task
behavioral1
Sample
NitroRansomware.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
NitroRansomware.exe
Resource
win10v2004-20231215-en
General
-
Target
NitroRansomware.rar
-
Size
24KB
-
MD5
e9b76fdbfa3025816e78e0fc64e50723
-
SHA1
0dcf92eeadc3ce8e90484405e47f3a0604ca05da
-
SHA256
9a8fb8a3604604036f0b7747d6fb17f66076ae60fcc28ce88d8ba60098a09511
-
SHA512
3e0ec9832b5daa82fa19548fea36b50531b109c3c12d389ed35a905f0e3889266494e49d45ac730d65175672edf9317a957064d93e89ef7c3d3d65f7d52a0716
-
SSDEEP
768:aW4S0O9lgVx3hdh75X50ETHvvtuPES/ni:aW4S0EgVVNd50ONuPF/ni
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NitroRansomware.exe
Files
-
NitroRansomware.rar.rar
-
NitroRansomware.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ