a9e2ab65d7f6faa65564ad05c5227246 | Triage

Resubmissions

27-02-2024 22:28

240227-2dw21adb8v 10

27-02-2024 18:44

240227-xdt57agg8t 10

Sharing

General

Target

a9e2ab65d7f6faa65564ad05c5227246
Size

61KB
MD5

a9e2ab65d7f6faa65564ad05c5227246
SHA1

f08915e84cf8831ec354c161689057f8d5ba23a8
SHA256

ac8d46d555122c2f076e0804c0a588ee0f0a3183f6e4364394e5a4c61a1a10eb
SHA512

7cfb6e91d9da3a2c8918ede594e3387e6a6751cf13cb21cbbb664da33c132e47cf2cc86ad3587a668a0c53ef6c5a370d5751f50698ce6070383ed64a56661b85
SSDEEP

768:Z6gBoRjl0Gjru+A4YyYAwya9LDwUzc80gmq3oP/oDR:Z6Fl5jy+A0Yrywr/0O8/o9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

a9e2ab65d7f6faa65564ad05c5227246

Files

a9e2ab65d7f6faa65564ad05c5227246
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Gabst\Downloads\Nitro-Ransomware-master\Nitro-Ransomware-master\NitroRansomware\obj\Release\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ