C:\Users\ricky\source\repos\RansomWare\RansomWare\obj\Release\RansomWare.pdb
Static task
static1
General
-
Target
RansomWare.exe
-
Size
16KB
-
MD5
86bed89bcad48640a2f51ae9fdf3c487
-
SHA1
1514f246c40d8b19a8d22a0c25a6e50a06d0e09e
-
SHA256
2ee59ddec63465810f4c050c3c7ea50730ee62ce956f557273f893d0f0e87c8b
-
SHA512
9f45b54fee6d671a7ec417a1cc38c23f965359726af249da54ed4772b7f100af1c5047be173d8cbd111e33baf4181263abc100111009c9b4790810adcbd44402
-
SSDEEP
384:S5oQxLGTCjrMXpZkjvPualqVpseTptYcFwVc03K:SRIFAxqfpttYcFwVc6K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RansomWare.exe
Files
-
RansomWare.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ