Behavioral task
behavioral1
Sample
2023-05-28_103f8c9004c57173a64dfc736c298926_destroyer_wannacry.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2023-05-28_103f8c9004c57173a64dfc736c298926_destroyer_wannacry.exe
Resource
win10v2004-20230220-en
General
-
Target
2023-05-28_103f8c9004c57173a64dfc736c298926_destroyer_wannacry
-
Size
70KB
-
MD5
103f8c9004c57173a64dfc736c298926
-
SHA1
8135747c1f835d901b2522787bcb34363d5fcaa3
-
SHA256
8a922b0306cc42abec7e71f6bf95659a622fe13919e95cb7f9fb16069e1a75f0
-
SHA512
b4ce5dc0269b031e4df16085bb26bca9be6ce0930a51f5c0e28aee2f3bd9af69158a3e2409b4f512b0c1d2d8af8a8f57f1623b1e0906e90c4b0c348333ef437f
-
SSDEEP
1536:qtNnis0TG63q9SzMa5iYGp5iDo9fFX6i00KY1w:XLf3q9Sz5iRXiDqZe
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-05-28_103f8c9004c57173a64dfc736c298926_destroyer_wannacry
Files
-
2023-05-28_103f8c9004c57173a64dfc736c298926_destroyer_wannacry.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ