Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_37b4a3a11688e435cd8ea237d315557a_wannacry.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_37b4a3a11688e435cd8ea237d315557a_wannacry.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-20_37b4a3a11688e435cd8ea237d315557a_wannacry
-
Size
2.9MB
-
MD5
37b4a3a11688e435cd8ea237d315557a
-
SHA1
569a28d66922818a70d418737f2d5d5f9d7c0ab2
-
SHA256
10f122e543d53fadb894b15dbee0f3ea0488bbfda49cafa316fd766d845c2108
-
SHA512
22f3e292858119b1addb83d11a2032837e30696d1501356ca5d9e83ae3706043bf2e568ab80e634ddf71c082c82eb597d5c5bc3f8544b6b5ac7df2d493834723
-
SSDEEP
24576:4jmlO0MHUnz1oeuoTqyuhIw3HYT6qF8yam6ib:OmlO0phhfTqyuVcb7aBK
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-20_37b4a3a11688e435cd8ea237d315557a_wannacry
Files
-
2024-02-20_37b4a3a11688e435cd8ea237d315557a_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ