2024-10-19_8f95d249a8940a86f0518d676cfc3096_derusbi_lockbit_wannacry | Triage

Sharing

General

Target

2024-10-19_8f95d249a8940a86f0518d676cfc3096_derusbi_lockbit_wannacry
Size

4.5MB
MD5

8f95d249a8940a86f0518d676cfc3096
SHA1

ac3c91f89d4fca14410e24bd348ced70891b543a
SHA256

d0b41ed9435129ccdf1bf7ca87fa4b33649b5b924d8cdbc12966d33fb7b9b873
SHA512

21e8fe5d0f2e2e9ea36a7ea5fc0230a9ac3657528f93ad9b83ef9895fccf2563ecc8f6115a625c60ca8581e6bc043a3a6560a50d650476676bf8c391975e1a82
SSDEEP

24576:HgIWd8sPeH6qAoIqEU502aM56PemUnJNhxtP+AmUmey2s73tOOu55E9QiwzTUBUD:id8gez+AmUvy2s7s5e9QiE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-19_8f95d249a8940a86f0518d676cfc3096_derusbi_lockbit_wannacry

Files

2024-10-19_8f95d249a8940a86f0518d676cfc3096_derusbi_lockbit_wannacry
.exe windows:4 windows x86 arch:x86

e7c640032764b265f6657b62cb8daef5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord626
ord553
ord660
ord666
ord593
ord594
ord595
ord520
ord522
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord716
ord531
ord532
ord534
ProcCallEngine
ord535
ord645
ord646
ord647
ord570
ord573
ord576
ord577
ord578
ord685
ord100
ord610
ord613
ord617
ord619
ord542
ord545
ord548
ord580
ord581

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ