Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_6f4b8c3439836b7eb631d2767d17fc73_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_6f4b8c3439836b7eb631d2767d17fc73_wannacry.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-13_6f4b8c3439836b7eb631d2767d17fc73_wannacry
-
Size
2.2MB
-
MD5
6f4b8c3439836b7eb631d2767d17fc73
-
SHA1
4439eaed6ddff211afc140cac6d97f1e00c6e092
-
SHA256
165cdd5cebdfd5af003c73220ee803f9f3f590d62b03d7a861150695cfb41c4d
-
SHA512
ee7788c6ccbe216bd8f8f7c8c2ced846c78de1da336d0ea63e0c264a0194f02bdd1ee41ba4fed3944ebf1161c7a13a52a9412c064a6d8ef78e06efa3b505e7e5
-
SSDEEP
12288:TSGCwGOOvIPR8XU39Gxi6FXCn4/e1DXStc7qEKmCdpnY9C2hAtX8vk7MXvl/Wxv2:TSfwGDX69z6FXC42diTrpn+AtXk8o1V
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-13_6f4b8c3439836b7eb631d2767d17fc73_wannacry
Files
-
2024-03-13_6f4b8c3439836b7eb631d2767d17fc73_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ