23e8858a3f412190e31be918bb91c72b_JaffaCakes118 | Triage

Sharing

General

Target

23e8858a3f412190e31be918bb91c72b_JaffaCakes118
Size

61KB
MD5

23e8858a3f412190e31be918bb91c72b
SHA1

355e30d1259d02a805a5a8d00848413321ceadd1
SHA256

db6ded62d80e29a35b0a3fd6613fea1e65cc3cece41c6e281426d5cf5ff77e51
SHA512

16af337585d5fb7d4055fdb1feabc3c1707af33e13c99ccc7c0575f153e821eb556a0a10381a4d087d17811e948d88a8a429b06cd53b149a2f288b6b4665cdb6
SSDEEP

768:9KsMqCXfVcWO/M9ZkiANIU+sYLDwUzc80gmq3oP/oDz:9KseiM9ZkiAPEr/0O8/o/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23e8858a3f412190e31be918bb91c72b_JaffaCakes118

Files

23e8858a3f412190e31be918bb91c72b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\gmoll\Desktop\Nitro-Ransomware-master\NitroRansomware\obj\Debug\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ