cbcf9db19f980d9b5232345242d981fa | Triage

Sharing

General

Target

cbcf9db19f980d9b5232345242d981fa
Size

60KB
MD5

cbcf9db19f980d9b5232345242d981fa
SHA1

0f119cc4df6ea8a861141016e595f99da295b16e
SHA256

b244fa001f1f45246b4608fdac78f80988ad60150aa08e7988fc5dbd37e323ef
SHA512

7d30cc8ef76b8f8c611f80edca3ccf7ee0daaaa9adbb5fe80db53ae65b2bc5d75e2a1b3e21ae164e211b7176a108ce92d23bac3d6b2a01f113ca019ea846b9d9
SSDEEP

768:5OXeakeRbRW3DNANIhrtLvLDwUzc80gmq3oP/oDU:5OPW3DNA8Fr/0O8/oA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbcf9db19f980d9b5232345242d981fa

Files

cbcf9db19f980d9b5232345242d981fa
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Bureau\Others\grab\Nitro-Ransomware-master\NitroRansomware\obj\Release\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ