chaos | 2023-02-11_6f604aeb2e1692200e0079e2c66e3142_destroyer_wannacry[.]exe | Triage

Sharing

General

Target

2023-02-11_6f604aeb2e1692200e0079e2c66e3142_destroyer_wannacry.exe
Size

21KB
MD5

6f604aeb2e1692200e0079e2c66e3142
SHA1

abb3c0372f463b2e6e33a2465ca52c93e43f69a7
SHA256

c797991107d261423bebab5f3cd3b44b5a63e3925baaf53ed8b0ba77f5c7fb7b
SHA512

0183da7cdaa9e4d972078af90c43e3b48e125cd7fccc912297ec40915da1c8a73b7c515bdd6f6144cd9096e245d0240bb77311fc46321e91286527e64a4fe984
SSDEEP

384:F3Mg/bqo25+Iped0T9AJvr91CtpEMG43FeZ:/qo2EIplT9ovr92pvGCeZ

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Files

2023-02-11_6f604aeb2e1692200e0079e2c66e3142_destroyer_wannacry.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ