682723a522c86f64b397afcdd65c21a1_JaffaCakes118 | Triage

Sharing

General

Target

682723a522c86f64b397afcdd65c21a1_JaffaCakes118
Size

61KB
MD5

682723a522c86f64b397afcdd65c21a1
SHA1

80999ff4ac0b068eb5028b50601b7ec9fe77a827
SHA256

fb92c528c1207a2421ec817cbf9793a3859637d7dc235a3998e07695860e3ce1
SHA512

703aafcece75f310b42c52aa42ddfbf3a680b6e2636c08f5ca1895abc722fe7fce99484b6257bbe70d5253f6a054c74c8b2fb6abcb431702e901efd51e7355c3
SSDEEP

768:VHKsMqCXfVcWlQM9ZkiANIULAYLDwUzc80gmq3oP/oDw:hKseSM9ZkiAP1r/0O8/os

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682723a522c86f64b397afcdd65c21a1_JaffaCakes118

Files

682723a522c86f64b397afcdd65c21a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\a\Downloads\Nitro-Ransomware-master\Nitro-Ransomware-master\NitroRansomware\obj\Debug\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ