Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_5fa6af6bf2b4c45abeee0433a8a8b42f_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_5fa6af6bf2b4c45abeee0433a8a8b42f_wannacry.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-16_5fa6af6bf2b4c45abeee0433a8a8b42f_wannacry
-
Size
1.3MB
-
MD5
5fa6af6bf2b4c45abeee0433a8a8b42f
-
SHA1
9aaf82649f3be62472856c5d7a9251475971ff56
-
SHA256
a50056062c8b40c63e83e63a0cbb3b3752c92d80e6ec76aad65c4290c116011d
-
SHA512
047a4984551fee422e60a44ee3c276ef3930411b9453fc262d603e06261a05e9bf5a42305c5b2c2ce9dbaf1b63b6680004566f30bf3b568ab361ca87fe1fc52a
-
SSDEEP
12288:4cNtLCrRgiD/MmKKvZUR1A5EsP3l8p7feXobMleI8:NC9JDEm+SlqYrleI8
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Detects ransomware indicator 1 IoCs
resource yara_rule sample SUSP_RANSOMWARE_Indicator_Jul20 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-16_5fa6af6bf2b4c45abeee0433a8a8b42f_wannacry
Files
-
2024-04-16_5fa6af6bf2b4c45abeee0433a8a8b42f_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ