Behavioral task
behavioral1
Sample
2024-10-05_865476860ffd6a3223280d9e95212a75_destroyer_wannacry.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-10-05_865476860ffd6a3223280d9e95212a75_destroyer_wannacry.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-05_865476860ffd6a3223280d9e95212a75_destroyer_wannacry
-
Size
27KB
-
MD5
865476860ffd6a3223280d9e95212a75
-
SHA1
d709887cdec7260d241c364c8a3d05b899f99911
-
SHA256
275b74689249cc22ab5e5b502bb9456c76f0d81eb2c6c75914c3d89e398a4644
-
SHA512
c56cf225c3b416db0e01df3f41d8e03e88b267f4e5305118b76fd33dac8b78c600161393270af4f2d2ead9d03d0ecb56d7e6033f0139fa9ea1073e072dc9783d
-
SSDEEP
384:UtWZPzzxAm1vp5ZRoDsSgrPiEDNv8V8lQ/xw6fLlJqsvlIOy5o91hWfpC82vb:57zxAmpfysSLEZkqDho9efU82T
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-05_865476860ffd6a3223280d9e95212a75_destroyer_wannacry
Files
-
2024-10-05_865476860ffd6a3223280d9e95212a75_destroyer_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ