Behavioral task
behavioral1
Sample
2024-11-07_bcf9a3f92706b2cb338459dd52488472_wannacry.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-07_bcf9a3f92706b2cb338459dd52488472_wannacry.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-11-07_bcf9a3f92706b2cb338459dd52488472_wannacry
-
Size
352KB
-
MD5
bcf9a3f92706b2cb338459dd52488472
-
SHA1
5e31b8509abc813d474577c6785e961ced7cc697
-
SHA256
1229e2bf183c624411a3ee4efb10a27a500593b36c9f2643d1c2222479cea83d
-
SHA512
53b4c972c21a18551af1a2803855d73acf344e566b5bf85a88b985c00a4cd5e00cf1bfe0dcafe25fcfe2c0616dc0473a45cfd9918cedea0d4c87a988ed5bdb23
-
SSDEEP
6144:lQsq9wlNPowTMHRSsfcUN1x/Vy21WW/R3mj8YR9em2fG9p:lQMl6wTMHR51WsR2j8YRwm2fyp
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-11-07_bcf9a3f92706b2cb338459dd52488472_wannacry
Files
-
2024-11-07_bcf9a3f92706b2cb338459dd52488472_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 349KB - Virtual size: 349KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ