20240929342bfeda02c1e8d47a8bd4dd6cc6e99ewannacry

Sharing

Copy URL Twitter E-mail

General

Target
20240929342bfeda02c1e8d47a8bd4dd6cc6e99ewannacry
Size 5.0MB
Sample240929-se329sscra
SHA256 108fa5f2d75754e2c1bd7700c152e1f295541af5f1fe186214d307ef6703d541
MD5 342bfeda02c1e8d47a8bd4dd6cc6e99e
SHA1 8bebf2c98f9fda20507d592b92867d178a55d8c7
SHA512 3e6407498b7c2208b70f0c85a78af17b9fca8e8978969c00c4f19db60016fd7b4f37f535f47bc91f17717a5096079b121c909bf2ba1c75e773ff8d92ee23930d
SSDEEP 98304:SDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2Hq:SDqPe1Cxcxk3ZAEUadzR8yc4Hq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240929342bfeda02c1e8d47a8bd4dd6cc6e99ewannacry

File Explorer

20240929342bfeda02c1e8d47a8bd4dd6cc6e99ewannacry

.exe 5.0MB

20240929342bfeda02c1e8d47a8bd4dd6cc6e99ewannacry

IMPHASH 9ecee117164e0b870a53dd187cdd7174
SHA256 108fa5f2d75754e2c1bd7700c152e1f295541af5f1fe186214d307ef6703d541
MD5 342bfeda02c1e8d47a8bd4dd6cc6e99e
SHA1 8bebf2c98f9fda20507d592b92867d178a55d8c7
SHA512 3e6407498b7c2208b70f0c85a78af17b9fca8e8978969c00c4f19db60016fd7b4f37f535f47bc91f17717a5096079b121c909bf2ba1c75e773ff8d92ee23930d
SSDEEP 98304:SDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2Hq:SDqPe1Cxcxk3ZAEUadzR8yc4Hq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6756265

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject InterlockedIncrement GetCurrentThreadId GetCurrentThread ReadFile GetFileSize CreateFileA MoveFileExA SizeofResource TerminateThread LoadResource FindResourceA GetProcAddress GetModuleHandleW ExitProcess GetModuleFileNameA LocalFree LocalAlloc CloseHandle InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GlobalAlloc GlobalFree QueryPerformanceFrequency QueryPerformanceCounter GetTickCount LockResource Sleep GetStartupInfoA GetModuleHandleA

advapi32

StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA ChangeServiceConfig2A SetServiceStatus OpenSCManagerA CreateServiceA CloseServiceHandle StartServiceA CryptGenRandom CryptAcquireContextA OpenServiceA

ws2_32

closesocket recv send htonl ntohl WSAStartup inet_ntoa ioctlsocket select htons socket connect inet_addr

msvcp60

??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@XZ

iphlpapi

GetAdaptersInfo GetPerAdapterInfo

wininet

InternetOpenA InternetOpenUrlA InternetCloseHandle

msvcrt

__set_app_type _stricmp __p__fmode __p__commode _except_handler3 __setusermatherr _initterm __getmainargs _acmdln _adjust_fdiv _controlfp exit _XcptFilter _exit _onexit __dllonexit free ??2@YAPAXI@Z _ftol sprintf _endthreadex strncpy rand _beginthreadex __CxxFrameHandler srand time __p___argc

Sharing

General

Malware Config

Signatures

File Explorer

20240929342bfeda02c1e8d47a8bd4dd6cc6e99ewannacry

kernel32

advapi32

ws2_32

msvcp60

iphlpapi

wininet

msvcrt

generic