Behavioral task
behavioral1
Sample
NEAS.2023-09-07_9e6331ccb1153d93e4ab3adcb3e0946f_wannacry_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-07_9e6331ccb1153d93e4ab3adcb3e0946f_wannacry_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2023-09-07_9e6331ccb1153d93e4ab3adcb3e0946f_wannacry_JC.exe
-
Size
265KB
-
MD5
9e6331ccb1153d93e4ab3adcb3e0946f
-
SHA1
7807c51fc2ae01c1465a899e8d7a7da39271fe97
-
SHA256
1a6071d823f8bdd5592d8e38bc46d25096100b2e7e2830055a78758abbdf4d03
-
SHA512
e2b322779e2f29afdabd88ae6d3864c63d08fbdbc3efc19f3f8a30bb935a52586e5e7a3368b0782a8c28727c7df0ef6af4ef7ce5e39ec96698cb2613ed50a944
-
SSDEEP
6144:MXq9GZw2tJ0B+x5IMnK8V3diKtKtdU6icE:MJZw6JC+x5IMnK2diGKf5i
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2023-09-07_9e6331ccb1153d93e4ab3adcb3e0946f_wannacry_JC.exe
Files
-
NEAS.2023-09-07_9e6331ccb1153d93e4ab3adcb3e0946f_wannacry_JC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ