Behavioral task
behavioral1
Sample
NEAS.2023-09-07_09217f184957662f513865f4af084528_wannacry_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-07_09217f184957662f513865f4af084528_wannacry_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2023-09-07_09217f184957662f513865f4af084528_wannacry_JC.exe
-
Size
265KB
-
MD5
09217f184957662f513865f4af084528
-
SHA1
293538860eacbba54a7f9d85c8ef450db014e176
-
SHA256
199ab1c7c1b2f7ccfafd692756f45dfe307b4acfcbac4d00641d14b7e4a03923
-
SHA512
96264cfb7089e76655e118e671184a231f5e7ed4ec133dd8f36479d100878540701f083e93e369a87e1234406ec684dde2bf86860038a6e579b89520bf6d2dff
-
SSDEEP
6144:KOq9KZw2tJ0B+x5IMnK8V3diKtKtdU6icE:KoZw6JC+x5IMnK2diGKf5i
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2023-09-07_09217f184957662f513865f4af084528_wannacry_JC.exe
Files
-
NEAS.2023-09-07_09217f184957662f513865f4af084528_wannacry_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ