C:\Users\Steven\Desktop\Ordner & Dateien\Nitro Ransomeware\Nitro-Ransomware-master\NitroRansomware\obj\Release\NitroRansomware.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cad7af2b2714b813aa083c5e692cd7ba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cad7af2b2714b813aa083c5e692cd7ba_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
cad7af2b2714b813aa083c5e692cd7ba_JaffaCakes118
-
Size
9.0MB
-
MD5
cad7af2b2714b813aa083c5e692cd7ba
-
SHA1
24eb7d428398fb6fe79da729e8ff416b0970d6d8
-
SHA256
7eceee2d481d80031eb26f51bd11fbf9671c123107c83b0100b5dbaaf52ec833
-
SHA512
5f8902b38668bbf17001e47cb5045c590f1d733e00e0dddcdc5f95c883f93afdddac97d3a6f37981b9648869fd3247220d92adef8ca42e6a3b7630ac9300c4b8
-
SSDEEP
768:HOucKn7n1JGDNANIUARbvLDwUzc80gmq3oP/oDE:HO2GDNAPA9r/0O8/o4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cad7af2b2714b813aa083c5e692cd7ba_JaffaCakes118
Files
-
cad7af2b2714b813aa083c5e692cd7ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ