Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_6169878abd6be664e82c7f82431e0caf_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_6169878abd6be664e82c7f82431e0caf_wannacry.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-13_6169878abd6be664e82c7f82431e0caf_wannacry
-
Size
2.5MB
-
MD5
6169878abd6be664e82c7f82431e0caf
-
SHA1
2cde192c062112b549c4a744f17d917c5d220219
-
SHA256
745cf0a56dc9deddfa2c5fcfe5a93b6a1ddc2746725327e800a94b1a8d3602f1
-
SHA512
a3a2b0de9e0fd8589c642176d519892794f9affa1f07dcbfffb42850129d0003980c1637612967c7ad879d94c9e011e814f703eade85d693b8da0b25504cb58e
-
SSDEEP
12288:DSGCwGhOvSPRz53Adhi6FPn4/e1D/Stc5ncrmCNnY9C2u8tX8vk7MXvlVXxvpQCI:DSfwGvtA+6FP42da5/nt8tXk8ovzhEt
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-13_6169878abd6be664e82c7f82431e0caf_wannacry
Files
-
2024-03-13_6169878abd6be664e82c7f82431e0caf_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ