Behavioral task
behavioral1
Sample
2023-08-23_af77c5f294ae60256fc906d0fdb5c064_wannacry_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-23_af77c5f294ae60256fc906d0fdb5c064_wannacry_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2023-08-23_af77c5f294ae60256fc906d0fdb5c064_wannacry_JC.exe
-
Size
288KB
-
MD5
af77c5f294ae60256fc906d0fdb5c064
-
SHA1
d3bab80b071bfd931e90c7a0f995ed940d124582
-
SHA256
af5d4103305fda1d2a415dd22177eb670298b0c834733804de2fff7de015f618
-
SHA512
0b93ad321025fbc12a34219159f29d6e749493dae9e38398d6f149f0668be3c7aedf2531ad6a96a75208e32f880991a5c5892a8f6be14f690592b136e1978f15
-
SSDEEP
6144:73vkltq9RZw2tJ0B+x5IMnK8V3diKtKtdU6icE:r4oZw6JC+x5IMnK2diGKf5i
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-23_af77c5f294ae60256fc906d0fdb5c064_wannacry_JC.exe
Files
-
2023-08-23_af77c5f294ae60256fc906d0fdb5c064_wannacry_JC.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ