Behavioral task
behavioral1
Sample
2023-07-13_0d91028ccb416eca10e4311856605db1_wannacry.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2023-07-13_0d91028ccb416eca10e4311856605db1_wannacry.exe
Resource
win10v2004-20230703-en
General
-
Target
2023-07-13_0d91028ccb416eca10e4311856605db1_wannacry
-
Size
1.3MB
-
MD5
0d91028ccb416eca10e4311856605db1
-
SHA1
2143bd782f5d680236b961d5d582c8c2197555f6
-
SHA256
3c751e2857553009525249ecba517f53d249527a09c58d807ad3becfab8dcd51
-
SHA512
faa4e7a265e8a16acc081ce3c744e015d4f9f970f383ae9e7ff756eef04c0d073fc20ab2bdd82292d644f55a67a24a776216036ada3de4fe25f9dacda6f315ba
-
SSDEEP
12288:toHOb5tpdneaxTR/6C2rJQKnYgT52NPGBSEOvjN9ZXMIfexZM8LlLu9XmDTfCOA/:oOb1FYG2LAEe+CFUBfOvPGIT1
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-07-13_0d91028ccb416eca10e4311856605db1_wannacry
Files
-
2023-07-13_0d91028ccb416eca10e4311856605db1_wannacry.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ