Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_f1778122b33a51743543870fe4f7d9a1_wannacry.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-01_f1778122b33a51743543870fe4f7d9a1_wannacry.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-01_f1778122b33a51743543870fe4f7d9a1_wannacry
-
Size
10.6MB
-
MD5
f1778122b33a51743543870fe4f7d9a1
-
SHA1
35422e8cc970c20447f7165ed5874b8fe1a3c622
-
SHA256
baf9aefe45396783c52972d5966acfd7915397b84cca15b3fe43823b3e22f610
-
SHA512
92b283cb7639b35901e433677365c64580414eb377e011cda7763d6ddffb787091bad256b4d29824ae8db34eb501ecb0bf713e5619278772fefd65009b5f5b71
-
SSDEEP
196608:2lxZl6NIxCxspZAOCavH38Ac+FMi6Z35yU2tXX3B4u5kvqPe1Cxcxk3ZAEUadzRl:MxZsNLxspmOCavH38MMtZ35W4PqG1Fxy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-01_f1778122b33a51743543870fe4f7d9a1_wannacry
Files
-
2024-05-01_f1778122b33a51743543870fe4f7d9a1_wannacry.exe windows:4 windows x86 arch:x86
de95c94145a22220e3743f5717c88974
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
advapi32
OpenServiceA
ws2_32
inet_addr
msvcp60
??0_Lockit@std@@QAE@XZ
iphlpapi
GetPerAdapterInfo
wininet
InternetCloseHandle
msvcrt
__p___argc
Sections
.text Size: - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ