Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_bea7169d92fb3a9ef99b66d0403c5183_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_bea7169d92fb3a9ef99b66d0403c5183_wannacry.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-23_bea7169d92fb3a9ef99b66d0403c5183_wannacry
-
Size
3.2MB
-
MD5
bea7169d92fb3a9ef99b66d0403c5183
-
SHA1
7588fa1d6d61fc7ba311ea8e75d4aecb881cb06d
-
SHA256
cb83fa2f2736f805281c40e90ebf226d4c88dd63ee61c3d3f4ac09164ac686b0
-
SHA512
724c6b6ced3d0cd1f551fa60122dd603c08028ab00b09ed327ef6792a2c06a83a4c14f073653765fcc8dc4f9efac96b4d1659bd6191c13f43b3c7368113687e8
-
SSDEEP
49152:F9pNXz7/a7/E7/27/37/4BZ7/Z7/37/37/D7/OwM7h5IZe6:9NXyph5+
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-23_bea7169d92fb3a9ef99b66d0403c5183_wannacry
Files
-
2024-02-23_bea7169d92fb3a9ef99b66d0403c5183_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ