Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_7469b500ad1ea182a23b95c913e65faa_wannacry.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-02_7469b500ad1ea182a23b95c913e65faa_wannacry.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-02_7469b500ad1ea182a23b95c913e65faa_wannacry
-
Size
868KB
-
MD5
7469b500ad1ea182a23b95c913e65faa
-
SHA1
ff325b1007c7d8bf1cc8af7d488d506849405d23
-
SHA256
17d2811f6badb5cfa8ece04e04b9c18b0daa77f487d87deb2303ca5a2568d1ee
-
SHA512
2dd92bba048385c6c9fc746a6e72cc691d5e5fcad9fda64404b4dd9f1648e3c84a05d3865c54a3ce652830aafb85e5ccd8d9e8a51f05bf31bb29a6738486b2b3
-
SSDEEP
6144:VVFX7rhyp3X1TERTc1TeHmbmVhOLnZ6lcYntCL+i+lzNQHlISp5w+07fvIsatvsF:bjyJXWl0ZZYtCL+i+9NQFIS4trIsauZ/
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_GENRansomware -
Detects ransomware indicator 1 IoCs
resource yara_rule sample SUSP_RANSOMWARE_Indicator_Jul20 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-02_7469b500ad1ea182a23b95c913e65faa_wannacry
Files
-
2024-06-02_7469b500ad1ea182a23b95c913e65faa_wannacry.exe windows:0 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 868KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ