D:\DarkOracle\Nitro-Ransomware-master\Nitro-Ransomware-master\NitroRansomware\obj\Release\NitroRansomware.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8bf1c633b4e20c6896a3fd307a840245_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8bf1c633b4e20c6896a3fd307a840245_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8bf1c633b4e20c6896a3fd307a840245_JaffaCakes118
-
Size
61KB
-
MD5
8bf1c633b4e20c6896a3fd307a840245
-
SHA1
20e579b22ca06c0509fbc194888bad168d5adb0f
-
SHA256
fb9babb3bd29a77738bb4e4f37394992be0add9521ef64adece1845ea479313c
-
SHA512
209880229d0fdeb738a74c9f6f38711b6b9806f0456248940df0fe197063fc6f8029c9fbf1e6b0c9a08526c732fd504deda930c800fc691d2995515644185d63
-
SSDEEP
768:YP+2AG1MXq9E3tnJvLDwUzc80gmq3oP/oDS:Vz819EJhr/0O8/o+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8bf1c633b4e20c6896a3fd307a840245_JaffaCakes118
Files
-
8bf1c633b4e20c6896a3fd307a840245_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ