WaCry[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WaCry.exe
Size

304KB
MD5

9f68b163b1e48bda1b6801f2435d0f3a
SHA1

b12ca2dfba95bce6c75f1656fdf2bc2a4271926d
SHA256

2aa81e4da94a9aa66e8ac61946f7cfe6d9a6592f39107bfc7de16e90bd3fb12a
SHA512

ffe9610524f4ef85e19ea1b9993cd1ae6a2c344badb00071ec3473181d5c4b424bc1d6d6d3b9ac74ae50c537068f37411498eebf5c09aa9a90791d1f3ac69dc0
SSDEEP

6144:P1an8ov900xe8oQZO8og3H8odL8ojzRXxowt:P1K3De1MrLVno8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WaCry.exe

Files

WaCry.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ