Overview

overview

10

Static

static

10

17b447b971...18.exe

windows7-x64

10

17b447b971...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    17b447b971a4977b2bfb2c28659aa1dd_JaffaCakes118
  • Size 938KB
  • Sample240329-efm6jshf85
  • SHA256 5fa490668a9963e97d956f9a3b0c746b1d16eee9a73dfba875c9a3dc0e2c0d1b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
atomsilo

Malware Config

Signatures

  • AtomSilo Ransomware 1 IoCs
  • Atomsilo family
    atomsilo
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 17b447b971a4977b2bfb2c28659aa1dd_JaffaCakes118
    .exe 938KB

17b447b971a4977b2bfb2c28659aa1dd_JaffaCakes118

  • IMPHASH 6668cd1f7ba3c5e5a506da86e71dcdec
  • SHA256 5fa490668a9963e97d956f9a3b0c746b1d16eee9a73dfba875c9a3dc0e2c0d1b
  • MD5 SHA1 SHA512 SSDEEP
windows:5windowsx64arch:x64

  • AtomSilo Ransomware

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
2
Major OS version
5
Entry point
304324
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths