Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_45ca00e54bf3d37aaf1cb1f0bc9aabf3_wannacry.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-12_45ca00e54bf3d37aaf1cb1f0bc9aabf3_wannacry.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-12_45ca00e54bf3d37aaf1cb1f0bc9aabf3_wannacry
-
Size
2.0MB
-
MD5
45ca00e54bf3d37aaf1cb1f0bc9aabf3
-
SHA1
96ff4482f8ca43aabd772e2479290d3058ca8405
-
SHA256
15e27f4fba9310471c4b9cb53df32c8bd2c1a763dbf124452bc68b4610fa3842
-
SHA512
34dd2e45f43f458ef2ffa37c7be2b3367a7133742cac2e7baf587b456958da4be24b14ab4ffb56b94ba47afd0559d8be21f9ef388915706fa9f2916cf71c80dc
-
SSDEEP
12288:yCx7/B7/5s7/u6DD1fdMnv1JZi0A9meALl:v7/B7/W7/u631VMnvP/eg
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-12_45ca00e54bf3d37aaf1cb1f0bc9aabf3_wannacry
Files
-
2024-03-12_45ca00e54bf3d37aaf1cb1f0bc9aabf3_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ