1484a0ecf720d351f8897c2f9b3f5046_JaffaCakes118 | Triage

Sharing

General

Target

1484a0ecf720d351f8897c2f9b3f5046_JaffaCakes118
Size

61KB
MD5

1484a0ecf720d351f8897c2f9b3f5046
SHA1

8770a72054cc21f07051df2b4c0f7775cc4fa731
SHA256

a00d950fbee25d407f79f5d7211cbd1f15d27f89bf5714e44f222c9013f6c131
SHA512

136ef22f74ed55859bb143a26b2dbf1f4bb84c267d461e60d44934eb879a9efc4902e05dd386bb4926ea2cc469f8f7efe24ae6d6a4bb45511b4939558b379d97
SSDEEP

768:iKsMqCXfVcWO/M9ZkiANIUhyIYLDwUzc80gmq3oP/oDn:iKseiM9ZkiAPhAr/0O8/o7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1484a0ecf720d351f8897c2f9b3f5046_JaffaCakes118

Files

1484a0ecf720d351f8897c2f9b3f5046_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Matthew\Desktop\Nitro-Ransomware-master\NitroRansomware\obj\Debug\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ