chaos | 2024-04-09_6351587d8a4d02af63204e1f49b5ba56_wannacry

Resubmissions

09-04-2024 09:28

240409-lfmckseh9z 10

09-04-2024 09:23

240409-lcyanseh5t 10

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-09_6351587d8a4d02af63204e1f49b5ba56_wannacry
Size

1.9MB
MD5

6351587d8a4d02af63204e1f49b5ba56
SHA1

b0c64954ab96ba600ee37c37cfeacc43d04b0959
SHA256

c3cb824c21f93e55a2e8e15e431d9ebaee35b6a85f2764abf95e84dea4b6b765
SHA512

31f945a0b3a1602fa3e1766ee54fbdbaacd46942e7db304a179d5ed553a07649dddcb9c44c91d3a4e085c589f2bd1e0bc3064e12606418d89149b478e57204a7
SSDEEP

24576:o9/D6y/1yOeoErA7vMajzGDX9uZTUir0XZQQ3ffTRuNd7Ciq9VII7OQ:o9bIowAj53aXUZTZeQQwA5z

Score

10^/10

chaos

Malware Config

Signatures

Chaos Ransomware 1 IoCs

resource	yara_rule
sample	family_chaos

Chaos family
chaos

Files

2024-04-09_6351587d8a4d02af63204e1f49b5ba56_wannacry
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:6d:01:46:08:a5:fb:65:34:a8:09:a2:ea:54:18:b8:f6:d6:23:a5:0d:be:06:b0:d9:10:e3:fe:33:e1:90:f6
Signer

Actual PE Digest

f6:6d:01:46:08:a5:fb:65:34:a8:09:a2:ea:54:18:b8:f6:d6:23:a5:0d:be:06:b0:d9:10:e3:fe:33:e1:90:f6

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

f6:6d:01:46:08:a5:fb:65:34:a8:09:a2:ea:54:18:b8:f6:d6:23:a5:0d:be:06:b0:d9:10:e3:fe:33:e1:90:f6Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

f6:6d:01:46:08:a5:fb:65:34:a8:09:a2:ea:54:18:b8:f6:d6:23:a5:0d:be:06:b0:d9:10:e3:fe:33:e1:90:f6
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B