Behavioral task
behavioral1
Sample
2023-02-01_697deef7b2ca6b79c3608ebdf9c70977_krakencryptor_wannacry.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2023-02-01_697deef7b2ca6b79c3608ebdf9c70977_krakencryptor_wannacry.exe
Resource
win10v2004-20220812-en
General
-
Target
2023-02-01_697deef7b2ca6b79c3608ebdf9c70977_krakencryptor_wannacry.exe
-
Size
604KB
-
MD5
697deef7b2ca6b79c3608ebdf9c70977
-
SHA1
64fb76029f4d7b3aa06646f286182daf4de2a27a
-
SHA256
8a6aa9e5d58784428d0b1641e99f024438b20747993039e16b8d262f3f5fd347
-
SHA512
18870c02d0193349748447d92eb1fd2540ad02d54b736e9ce42dbe275acee5cbaa09d4f95e188a94d29e69f9349ff0bbe60e937880a867d4573847d93f7b2f8e
-
SSDEEP
12288:/g1YsKMSiS9SW35dmhqoeBsGJGKlOD4BZXu3lKG3pHLb4:/gd5QSW3rQqoeBsGJGTyG3JLk
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
2023-02-01_697deef7b2ca6b79c3608ebdf9c70977_krakencryptor_wannacry.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ