Behavioral task
behavioral1
Sample
2024-01-23_fc2baff5819b3085e26158d9d33ef6fc_wannacry.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-23_fc2baff5819b3085e26158d9d33ef6fc_wannacry.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-23_fc2baff5819b3085e26158d9d33ef6fc_wannacry
-
Size
231KB
-
MD5
fc2baff5819b3085e26158d9d33ef6fc
-
SHA1
a3ace4accf8783ab3b3353f059edeb4ac38e550a
-
SHA256
10c43619167da0f0bfc8a55156544fb9d4bfc22a491b50b76aec519cfd3e3037
-
SHA512
ec92c9e133a8f74d494cd7a55821917a921d782b120283c7f7cd9a6d72f13d74f2ec2e1338b25caee91aad2af6c15b91b2e4a23a3cc85bb59b9feca40ffe299d
-
SSDEEP
6144:wJr931OEO2zTB29aAi0KnGpHi6GzfwTMg6Pe:6O7sk3xsITM
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-23_fc2baff5819b3085e26158d9d33ef6fc_wannacry
Files
-
2024-01-23_fc2baff5819b3085e26158d9d33ef6fc_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ