1a4d0f0002036b4c77841100a8e05f46_JaffaCakes118 | Triage

Sharing

General

Target

1a4d0f0002036b4c77841100a8e05f46_JaffaCakes118
Size

61KB
MD5

1a4d0f0002036b4c77841100a8e05f46
SHA1

a9733fe6b29bfa2aed64a4fc0d9eef7083252b84
SHA256

dc464ff6c0a7512b6c2582f1539176f1eb409e603fecde8a3eb19661eaffe60d
SHA512

7c2a166c5032b83cce37e007c380805f8f90f8fa0b35958c44b8cad349f61dabd8fe3d8f811a4e6fe33f09887401d4d0965eec4f3eb4237ea1d3af4c2e8d7ea5
SSDEEP

768:BKsMqCXfVcWlQM9ZkiANIULTYLDwUzc80gmq3oP/oDE:BKseSM9ZkiAPgr/0O8/oo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a4d0f0002036b4c77841100a8e05f46_JaffaCakes118

Files

1a4d0f0002036b4c77841100a8e05f46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Emi\Downloads\Nitro-Ransomware-master\Nitro-Ransomware-master\NitroRansomware\obj\Debug\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ