Behavioral task
behavioral1
Sample
9f01c4411a75c7cce2dd3e797f8e5766_destroyer_wannacry_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9f01c4411a75c7cce2dd3e797f8e5766_destroyer_wannacry_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
9f01c4411a75c7cce2dd3e797f8e5766_destroyer_wannacry_JC.exe
-
Size
27KB
-
MD5
9f01c4411a75c7cce2dd3e797f8e5766
-
SHA1
5cbefedec484cad65830a409f0d417d7eb0aae99
-
SHA256
bcd823dfc854eaa65a2309129245ac0ed1ee894e613e90b119edb87108dbac8b
-
SHA512
82bce6de104a6be161012add397d30579e7e9562b86b179f6c0f0a51101bc1056c6fa8e69d84aca3a517b0e27a44f3e5b75f666f757e24445bd8883ad98eb62e
-
SSDEEP
384:s3tWZPzzxAm1vp5Z+BhkRS74WtRQUxhhlsNpGOtlYOy5o91PoF/82vR:sO7zxAmpkhkRS1RQUxGN47ho9Bo982J
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f01c4411a75c7cce2dd3e797f8e5766_destroyer_wannacry_JC.exe
Files
-
9f01c4411a75c7cce2dd3e797f8e5766_destroyer_wannacry_JC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ