Behavioral task
behavioral1
Sample
2024-08-22_f0ffaa2a2b86db3f9e4141d61da80604_wannacry.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-22_f0ffaa2a2b86db3f9e4141d61da80604_wannacry.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-22_f0ffaa2a2b86db3f9e4141d61da80604_wannacry
-
Size
168KB
-
MD5
f0ffaa2a2b86db3f9e4141d61da80604
-
SHA1
e9ce0c50a6b7f15b440fb5b45aa3d9e8e23cfb8f
-
SHA256
6c49fdaea11c987e62bfe88d3f4b7e88652662a253a4df4321d319f559a1562b
-
SHA512
f0d9876ce1b5a174ec0db4148fca9909a2fc912d9db1551e302957fc6f2ccb1a3cfbcd5358a20f635088f5742a681edf2d002f07db2ea36d690f0f443900ed0f
-
SSDEEP
1536:leKebU6b0RgzZ8+1oqDAYkjeNY+RchBuwl/lrY0/x4GWB+Zi++VIMDFr9LAID8A:leKePQRgZFbJchBuihsZVRDFr9kID8A
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-22_f0ffaa2a2b86db3f9e4141d61da80604_wannacry
Files
-
2024-08-22_f0ffaa2a2b86db3f9e4141d61da80604_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ