55d3a93ab948a1bad005a276fd64ca77_JaffaCakes118 | Triage

Sharing

General

Target

55d3a93ab948a1bad005a276fd64ca77_JaffaCakes118
Size

60KB
MD5

55d3a93ab948a1bad005a276fd64ca77
SHA1

03e59428389de848cd34da7482363faacd9a771d
SHA256

3c57851605d84398dfb0df0050ed4542a6a64a9c6008525dcaea4f35d0b5dd90
SHA512

59839df9722eff95d34ca44ad8c759763b8f2c255e040ef7c5cb79e6cb8e28ad5ff9a939e951ed403f5a17ba42933a96c65892388bbe3c968476afbb64521d50
SSDEEP

768:GOucKn7n1JjDNANIUxqvLDwUzc80gmq3oP/oDL:GO2jDNAPOr/0O8/oX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55d3a93ab948a1bad005a276fd64ca77_JaffaCakes118

Files

55d3a93ab948a1bad005a276fd64ca77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ethan\Desktop\Nitro-Ransomware-master\NitroRansomware\obj\Release\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ