Static task
static1
Behavioral task
behavioral1
Sample
2024-03-11_fa947d600cc396933b2315483f9828be_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-11_fa947d600cc396933b2315483f9828be_wannacry.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-11_fa947d600cc396933b2315483f9828be_wannacry
-
Size
1.2MB
-
MD5
fa947d600cc396933b2315483f9828be
-
SHA1
3201b81ac02ba6da225376361240cda9543556d5
-
SHA256
1979b40e4f9e824a65cdd05fd3d6b17509850aeee9b2e1f8ff08d9780df649c0
-
SHA512
6bac62165b84e21479df6a5b7f9cee5792cf50215a49861bfc04f1610e6ff223386e24069d88f1745f132d7b67157b2341fcaa30cd9a54c99a1b4b5e39175520
-
SSDEEP
12288:aO+hpBeD6hyLwDhkNkf5TuoXrrZq6Ff5tA:adiDqiuf5B7rvlA
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Detects ransomware indicator 1 IoCs
resource yara_rule sample SUSP_RANSOMWARE_Indicator_Jul20 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-11_fa947d600cc396933b2315483f9828be_wannacry
Files
-
2024-03-11_fa947d600cc396933b2315483f9828be_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ