Behavioral task
behavioral1
Sample
2023-04-21_44f3a9311b23d84f336cc5b856f16682_wannacry.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-04-21_44f3a9311b23d84f336cc5b856f16682_wannacry.exe
Resource
win10v2004-20230221-en
General
-
Target
2023-04-21_44f3a9311b23d84f336cc5b856f16682_wannacry
-
Size
164KB
-
MD5
44f3a9311b23d84f336cc5b856f16682
-
SHA1
45e9f3c9836926822d4164848dad0dc6d5fd22d5
-
SHA256
9d7fb7050cf315639502f812d25d49c19b14c93948827484c2514bbc87261920
-
SHA512
858d16972a6fece4dd3a30b77f7415433c994a4edaa0064282b5f2b2027d8d0d31e21ac66583e270d7c0cfc42d1bd56cdd506fdf86d67994c78275be58282f6b
-
SSDEEP
3072:k3kw4Rlr9i0uIYGSKrG8yaJYCZWKuzfo5dXuZRodZXJvPbtH:64Pr9i00GrtUwJj1hH
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
Files
-
2023-04-21_44f3a9311b23d84f336cc5b856f16682_wannacry.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ