Behavioral task
behavioral1
Sample
2024-08-22_fffcec172fd2e908588f098ce331f3e7_chaos_destroyer_wannacry.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-22_fffcec172fd2e908588f098ce331f3e7_chaos_destroyer_wannacry.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-22_fffcec172fd2e908588f098ce331f3e7_chaos_destroyer_wannacry
-
Size
22KB
-
MD5
fffcec172fd2e908588f098ce331f3e7
-
SHA1
9846f2ca442cf1080ce104d737f90052fc5592a6
-
SHA256
91ef0318ac9a10ce0976b29f57ea570b6907cccc92f182f5e916d5273f0b71e3
-
SHA512
381b0691bb4e8c1bf0e7a4038c320faa112ad4b7d38ae2aa61c362aee7d6eedbb9c351ec5c57577af7081fc1d2c4e4ab756a282f63ba860f70ad3f06f27d9a3d
-
SSDEEP
384:u3Mg/bqo2I8wvTbLpXFugOjnJyjr91CbIde4:Mqo2javpkgOjJMr90ge4
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-22_fffcec172fd2e908588f098ce331f3e7_chaos_destroyer_wannacry
Files
-
2024-08-22_fffcec172fd2e908588f098ce331f3e7_chaos_destroyer_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ