Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_6fbbcf79a24fd8dced7e7ecc59f05ba1_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_6fbbcf79a24fd8dced7e7ecc59f05ba1_wannacry.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-23_6fbbcf79a24fd8dced7e7ecc59f05ba1_wannacry
-
Size
2.0MB
-
MD5
6fbbcf79a24fd8dced7e7ecc59f05ba1
-
SHA1
42b35f2986b3c08bdb2399ab6f06e2ca3958257d
-
SHA256
84d62291d7f2376386f7a17809b30ee228f35f1ea70696bb73f8fb1acd6c59c8
-
SHA512
69180e15408f4468764ff6c7f141749151f87c5eff8ef10ec4b7576bcf00b502c5d53375fcf75153103eade22c0f9b6f7ab87b62053d08773bade52e90fdc386
-
SSDEEP
24576:fREZXtlxtKqFKoL1mI54jVw7/PP7/+nlY:soGmI5ew7/PP7/+nlY
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-23_6fbbcf79a24fd8dced7e7ecc59f05ba1_wannacry
Files
-
2024-02-23_6fbbcf79a24fd8dced7e7ecc59f05ba1_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ