Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
2024-07-30_8798c00ba8b599989cc3a06da8c28a6e_wannacry.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-30_8798c00ba8b599989cc3a06da8c28a6e_wannacry.exe
Resource
win10v2004-20240709-en
General
-
Target
2024-07-30_8798c00ba8b599989cc3a06da8c28a6e_wannacry
-
Size
388KB
-
MD5
8798c00ba8b599989cc3a06da8c28a6e
-
SHA1
e79dbefc0b3747ec1767679e273c3f049143179a
-
SHA256
41bf69dda3999dc09e8cccf7475ecd7a000b64cdfc1c462672eb9dc7e42d21a9
-
SHA512
9bfaeb723104771001e9dbfbab81196a99ac2fe2f0fb9dc5cd5966941594b42ddfc91b1c182fda9c3f1c186187b7642edd149e0763b99def9d34a5104e4789b2
-
SSDEEP
12288:Ms48+MRhQbpN9++qzKdSxs23to2G4LyGA6Jyx:MszuCsi
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-30_8798c00ba8b599989cc3a06da8c28a6e_wannacry
Files
-
2024-07-30_8798c00ba8b599989cc3a06da8c28a6e_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 385KB - Virtual size: 385KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ