Behavioral task
behavioral1
Sample
2024-09-06_7f8f14557e21273304a2597621dd1fbc_destroyer_wannacry.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-06_7f8f14557e21273304a2597621dd1fbc_destroyer_wannacry.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-06_7f8f14557e21273304a2597621dd1fbc_destroyer_wannacry
-
Size
21KB
-
MD5
7f8f14557e21273304a2597621dd1fbc
-
SHA1
858d52d1b0e3193cf9613f027e4b6a96074623c8
-
SHA256
c4bc2a209dfaaa141cf05eb00674366249d33b61a23c06091a3647515f903791
-
SHA512
0f9889e3116c1628cfff7799e7f74ad7b416d87f2e835e456ff88f1905159739062a19340d4d5b7b02dbae5de2f413e1de9ee5049366f4a5ab6b897c18141d12
-
SSDEEP
384:q3MLWHn3kIkfdw6mpoXsQuvdtKXRUJxr91CzAE7eS:un3kIampoNyfKXR8xr9iZeS
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-06_7f8f14557e21273304a2597621dd1fbc_destroyer_wannacry
Files
-
2024-09-06_7f8f14557e21273304a2597621dd1fbc_destroyer_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ