Behavioral task
behavioral1
Sample
2024-07-06_16c101a408f5bd1526efaa723c33ef3d_wannacry.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-07-06_16c101a408f5bd1526efaa723c33ef3d_wannacry.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-06_16c101a408f5bd1526efaa723c33ef3d_wannacry
-
Size
262KB
-
MD5
16c101a408f5bd1526efaa723c33ef3d
-
SHA1
7a3c1e41118c3fb4824c34386dba3fbbbca6577f
-
SHA256
b9f591c79472e9b88a23026a4415b4de523e75416907dcf24717e2fb318a10ca
-
SHA512
5702185762d79c6cd6a5bb3b838c54bafa05ce59cae2b1d6f65017bcb0f9ef25565437fe4bf72a1eeee2754d13db1bb609db4996480a8ffb7b40db908b720698
-
SSDEEP
3072:tLc9bwyZnCboGSqihQ5Mk/EHCSQ9IiNP8Q1fBLe8vQQ7b8lW76+zGklGT5Ckn/dg:Fc90ScRiDH6b/e8/8li3GXuE3y7
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-06_16c101a408f5bd1526efaa723c33ef3d_wannacry
Files
-
2024-07-06_16c101a408f5bd1526efaa723c33ef3d_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ