9f5707816aea4bbe395676187269a547_JaffaCakes118 | Triage

Sharing

General

Target

9f5707816aea4bbe395676187269a547_JaffaCakes118
Size

60KB
MD5

9f5707816aea4bbe395676187269a547
SHA1

9aeedd62bd3f7c0a3501725c69b2493ac2f5ee13
SHA256

8f9533aeee2064abb573e4d75b89b907e57d7d2fb7b2588fee88a903c2a7f735
SHA512

e4a3c9566a1e6f093e698983ca5313aa5328e8fbbfd3cb59999372e2e06a8f9a7e531a5ebd3a924f228cbf5bc4d7270bbc91e877cf2b0b6f7333a497ae42a316
SSDEEP

768:ROo9osCdarCuqEUoJIHDp8LDwUzc80gmq3oP/oDV:ROmGuqho4yr/0O8/oh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f5707816aea4bbe395676187269a547_JaffaCakes118

Files

9f5707816aea4bbe395676187269a547_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\new shit usefull\shit\Nitro-Ransomware-master\Nitro-Ransomware-master\NitroRansomware\obj\Release\NitroRansomware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ