Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_87700e4ab2519bfb6932696e6994b85a_wannacry.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-23_87700e4ab2519bfb6932696e6994b85a_wannacry.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-23_87700e4ab2519bfb6932696e6994b85a_wannacry
-
Size
2.0MB
-
MD5
87700e4ab2519bfb6932696e6994b85a
-
SHA1
7b1d6f3edabf129577e59cbcda16e734a0f8511f
-
SHA256
64f8dae478186ef87d5a8437495d980b02509e88ead5782194ee7c75924932f8
-
SHA512
03a95051c2bc8555d8c4786ba55f4d8f63496a2292b20ac4a2a87bb3a19f92f65a4ef711a05d56f704526efbaba70318cfe36e04b14bec91eafa13628b62ced7
-
SSDEEP
24576:fqEZstlTtKCRKoL1vWMlWAw7/PP7/+nlY:MSGvWMzw7/PP7/+nlY
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-23_87700e4ab2519bfb6932696e6994b85a_wannacry
Files
-
2024-02-23_87700e4ab2519bfb6932696e6994b85a_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ