2024-10-23_dc3ba6285c2a5669fbb95587532eed68_hiddentear | Triage

Sharing

General

Target

2024-10-23_dc3ba6285c2a5669fbb95587532eed68_hiddentear
Size

606KB
MD5

dc3ba6285c2a5669fbb95587532eed68
SHA1

53bb4a49e23830ba559db00f7949a4189c7eb596
SHA256

897c8b26c82d78f14a43a0e7b3617993a806f7fa45812427c3b12a141bb7ce96
SHA512

9d1531701810d5c3a8fd57fc054908d85dc8e0edfbd58f6e8806e43a275dc6b8d99118e67f954ce3a88c95f140d345ec5441dc0908a1b4c3fe9c331cfd9a2aed
SSDEEP

12288:g4XLj1zY8ejQ8BLXYTiMXrX0IHPfuTjaDt01zWY+EOiOLAAf:jXFzYVMLz0sDD2+r8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-10-23_dc3ba6285c2a5669fbb95587532eed68_hiddentear

Files

2024-10-23_dc3ba6285c2a5669fbb95587532eed68_hiddentear
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\novel\Downloads\JigsawRansomware\JigsawRansomware\JigsawRansomware\obj\Release\Compito matematica.pdf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ