C:\Users\andre\Desktop\Pandora Rat\Новая папка\VMware\Annabelle-Ransomware-master\JigsawxD\obj\x64\Debug\Annabelle.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-04_05fd0124c42461ef553b4b17d18142f9_petya.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-04_05fd0124c42461ef553b4b17d18142f9_petya.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-04_05fd0124c42461ef553b4b17d18142f9_petya
-
Size
21.8MB
-
MD5
05fd0124c42461ef553b4b17d18142f9
-
SHA1
9407317cdb3dcc5b329bfa1c096e9c007f223fac
-
SHA256
c3a16fdcaf3398eaf253c853372589fc990caf33caec540703cacc49c2635280
-
SHA512
803bb4b39eff8c1e5ba5d0f3bbf4d498cf11f527c4496b1c5d91e175190b7f59f144064ec6c077e630a568092eb4fee7d989a4735fd6f8f95dcc0a2cb64afe98
-
SSDEEP
393216:/xZI4Q3yN3jywhuOHKigKL846FWCsZgkJbnjBq2++1NBHqnW/WiaTh0IF6JN6tkI:PQ3yRjyOnzrIWNLJbjBq2ZN0W/6hKayg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-04_05fd0124c42461ef553b4b17d18142f9_petya
Files
-
2024-10-04_05fd0124c42461ef553b4b17d18142f9_petya.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 21.6MB - Virtual size: 21.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ