C:\Users\leonm\OneDrive\Desktop\all files\Neuer Ordner\Neuer Ordner\geschützt\safe\JigsawxD\JigsawxD\obj\Debug\Annabelle.pdb
Static task
static1
1 signatures
General
-
Target
Annabelle-Ransomware-master.zip
-
Size
169.6MB
-
MD5
db4192243e3fb4bf6b7c26df8b58a6b7
-
SHA1
662d98e69dbed00bb7660ae16110ad1f8783fc2f
-
SHA256
eb1b7aaef1f11b669bbeea30dd6af248f05bbcb9de2e99a02a045eb7cb3620c7
-
SHA512
c9cd13a2daca7caf940b2d7f1130bd220740f025e06ae9257e5220903346002d535bcec34384b2199a3eb53ced8c98eafb62567f8aff5d6dcb55cc9fe234f6d3
-
SSDEEP
3145728:9VZotF2/UPx/TrcRmnWVvvmvcUNHgoseDnuvgUlrVoQ4zHK:2hPx/k642N5DnGHLkq
Score
3/10
Malware Config
Signatures
-
Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/Annabelle-Ransomware-master/JigsawxD/Resources/MBRiCoreX.exe unpack001/Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.exe unpack001/Annabelle-Ransomware-master/JigsawxD/obj/Debug/TempPE/My Project.Resources.Designer.vb.dll unpack001/Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.exe unpack001/Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/TempPE/My Project.Resources.Designer.vb.dll unpack001/Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.exe unpack001/Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/TempPE/My Project.Resources.Designer.vb.dll
Files
-
Annabelle-Ransomware-master.zip.zip
-
Annabelle-Ransomware-master/.gitattributes
-
Annabelle-Ransomware-master/Annabelle-tear.jpg.jpg
-
Annabelle-Ransomware-master/JigsawxD.sln
-
Annabelle-Ransomware-master/JigsawxD.v11.suo
-
Annabelle-Ransomware-master/JigsawxD/App.config.xml
-
Annabelle-Ransomware-master/JigsawxD/ApplicationEvents.vb
-
Annabelle-Ransomware-master/JigsawxD/Form1.Designer.vb
-
Annabelle-Ransomware-master/JigsawxD/Form1.resx.vbs
-
Annabelle-Ransomware-master/JigsawxD/Form1.vb.vbs
-
Annabelle-Ransomware-master/JigsawxD/Form2.Designer.vb
-
Annabelle-Ransomware-master/JigsawxD/Form2.resx.vbs
-
Annabelle-Ransomware-master/JigsawxD/Form2.vb.vbs
-
Annabelle-Ransomware-master/JigsawxD/Form3.Designer.vb
-
Annabelle-Ransomware-master/JigsawxD/Form3.resx.vbs
-
Annabelle-Ransomware-master/JigsawxD/Form3.vb.vbs
-
Annabelle-Ransomware-master/JigsawxD/Form4.Designer.vb
-
Annabelle-Ransomware-master/JigsawxD/Form4.resx.vbs
-
Annabelle-Ransomware-master/JigsawxD/Form4.vb
-
Annabelle-Ransomware-master/JigsawxD/GlobalSuppressions.vb
-
Annabelle-Ransomware-master/JigsawxD/JigsawxD.vbproj
-
Annabelle-Ransomware-master/JigsawxD/JigsawxD.vbproj.user
-
Annabelle-Ransomware-master/JigsawxD/My Project/Application.Designer.vb
-
Annabelle-Ransomware-master/JigsawxD/My Project/Application.myapp
-
Annabelle-Ransomware-master/JigsawxD/My Project/AssemblyInfo.vb
-
Annabelle-Ransomware-master/JigsawxD/My Project/Resources.Designer.vb
-
Annabelle-Ransomware-master/JigsawxD/My Project/Resources.resx.vbs
-
Annabelle-Ransomware-master/JigsawxD/My Project/Settings.Designer.vb
-
Annabelle-Ransomware-master/JigsawxD/My Project/Settings.settings
-
Annabelle-Ransomware-master/JigsawxD/My Project/app.manifest
-
Annabelle-Ransomware-master/JigsawxD/Resources/MBRiCoreX.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Annabelle-Ransomware-master/JigsawxD/Resources/annabelle.wav
-
Annabelle-Ransomware-master/JigsawxD/Resources/child.wav
-
Annabelle-Ransomware-master/JigsawxD/Resources/childsound.wav
-
Annabelle-Ransomware-master/JigsawxD/annabelle_folder_icon_by_nickohetenbern-da497yo.ico
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.Form1.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.Form2.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.Form3.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.Form4.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.Resources.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 21.6MB - Virtual size: 21.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.pdb
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Annabelle.xml
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.Form1.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.Form2.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.Form3.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.Resources.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.SplashScreen1.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.SplashScreen2.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.pdb.fun
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/Jigsaw.xml.fun
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawMuhaha.vbproj.FileListAbsolute.txt.fun
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawMuhaha.vbproj.GenerateResource.Cache
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawRemakeBetter.vbproj.FileListAbsolute.txt.fun
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawRemakeBetter.vbproj.GenerateResource.Cache
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawxD.vbproj.CoreCompileInputs.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawxD.vbproj.FileListAbsolute.txt
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawxD.vbproj.FileListAbsolute.txt.fun
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawxD.vbproj.GenerateResource.Cache
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/JigsawxD.vbproj.ResolveComReference.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/TempPE/My Project.Resources.Designer.vb.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/UpdateBackup.vbproj.FileListAbsolute.txt.fun
-
Annabelle-Ransomware-master/JigsawxD/obj/Debug/UpdateBackup.vbproj.GenerateResource.Cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/.NETFramework,Version=v4.5.AssemblyAttributes.vb
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.Form1.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.Form2.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.Form3.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.Form4.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.Resources.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\leonm\OneDrive\Desktop\all files\Neuer Ordner\Neuer Ordner\geschützt\safe\JigsawxD\JigsawxD\obj\x64\Debug\Annabelle.pdb
Sections
.text Size: 21.6MB - Virtual size: 21.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.pdb
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/Annabelle.xml
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/DesignTimeResolveAssemblyReferences.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/JigsawxD.vbproj.CoreCompileInputs.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/JigsawxD.vbproj.FileListAbsolute.txt
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/JigsawxD.vbproj.GenerateResource.Cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/JigsawxD.vbprojAssemblyReference.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/JigsawxD.vbprojResolveAssemblyReference.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x64/Debug/TempPE/My Project.Resources.Designer.vb.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.Form1.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.Form2.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.Form3.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.Form4.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.Resources.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.SplashScreen1.resources
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\leonm\OneDrive\Desktop\all files\Neuer Ordner\Neuer Ordner\geschützt\safe\JigsawxD\JigsawxD\obj\x86\Debug\Annabelle.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 21.6MB - Virtual size: 21.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.pdb
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/Annabelle.xml
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/DesignTimeResolveAssemblyReferences.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/JigsawxD.vbproj.CoreCompileInputs.cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/JigsawxD.vbproj.FileListAbsolute.txt
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/JigsawxD.vbproj.GenerateResource.Cache
-
Annabelle-Ransomware-master/JigsawxD/obj/x86/Debug/TempPE/My Project.Resources.Designer.vb.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Annabelle-Ransomware-master/LICENSE
-
Annabelle-Ransomware-master/README.md
-
Annabelle-Ransomware-master/jigsaw1-1.ico