D:\VSProjects\Ransomware\obj\Release\Ransomware.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Ransomware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Ransomware.exe
Resource
win10v2004-20240419-en
General
-
Target
Ransomware.exe
-
Size
19KB
-
MD5
810f402a0072e5d5e7cb9904a6e88ede
-
SHA1
13a1d735c1a043f1491a51422e9067bbc1b2e6a5
-
SHA256
b31f5391c66118d7f4f30e936d71ff22a2dfdc0490f1c6976fc0e2d594d6407b
-
SHA512
b849a6da01bf172cdc57d4ab5a83a8780e8916c54df6964d51719d991e5627a817543cc270d847fc660e1fce62b02d1cd0887dc273aaa1af94dca63f75899480
-
SSDEEP
384:z0zwBNWQwF7+29pmVyf/k+36kYcV6O7UiJFnh:zS1t79gMx7YcV6O4izh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ransomware.exe
Files
-
Ransomware.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ