Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_9ee1c94223032019d09dd413c5f523be_eternalromance_snake_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_9ee1c94223032019d09dd413c5f523be_eternalromance_snake_wannacry.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-16_9ee1c94223032019d09dd413c5f523be_eternalromance_snake_wannacry
-
Size
2.1MB
-
MD5
9ee1c94223032019d09dd413c5f523be
-
SHA1
635324810bb30e647bc26840303a93621def1c22
-
SHA256
fce73313ce797212660ab6fa0c190090518fc4be421cbd4c25adce859c112a1d
-
SHA512
71ed8d9f20b5a11fa1f51eea44209cf6073a7189acdb9f5273d874ef78edf31f901e84ae898eda664480e4e159af6464c95662ba5af095cb8f4dc7574785fe6a
-
SSDEEP
24576:OoX5zHFINvcHNaDESShezw4SgO6ZgxqdtQ2Qk3NCPXW5vkMUr:ZolchhezK6cqdttqPGuJ
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-16_9ee1c94223032019d09dd413c5f523be_eternalromance_snake_wannacry
Files
-
2024-04-16_9ee1c94223032019d09dd413c5f523be_eternalromance_snake_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ