2023-05-14_aa63e3fe9f8a1f3b4d69ecf97b298eef_destroyer_wannacry | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-05-14_aa63e3fe9f8a1f3b4d69ecf97b298eef_destroyer_wannacry
Size

71KB
MD5

aa63e3fe9f8a1f3b4d69ecf97b298eef
SHA1

4857a838355a1c7ccf1e274d796ae3159c7dd867
SHA256

0fa37f4d911600c8e39cd2c8746f368dd18b5c21a61b4b44cfa1e74c5b13a46e
SHA512

8855410486db49a73767d60f683474e8758da600c2ae7f7fa3567843a071397bc921d7fc9eaa8a4e88b6919e1712794b151a87b5f76075e3bf2bc6703a520267
SSDEEP

1536:I8Xr6wXxK9Bwpc+YY0rEV92zsnMlwVcl:IEO6mY0rEV9SsnMlqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-05-14_aa63e3fe9f8a1f3b4d69ecf97b298eef_destroyer_wannacry

Files

2023-05-14_aa63e3fe9f8a1f3b4d69ecf97b298eef_destroyer_wannacry
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ