Behavioral task
behavioral1
Sample
2024-12-31_5cdea7f9eb5668ea19690e9b06d6ee95_wannacry.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-12-31_5cdea7f9eb5668ea19690e9b06d6ee95_wannacry.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-12-31_5cdea7f9eb5668ea19690e9b06d6ee95_wannacry
-
Size
241KB
-
MD5
5cdea7f9eb5668ea19690e9b06d6ee95
-
SHA1
b8f82268f1ffa5c0cc09ad505836335dd96e41aa
-
SHA256
cab9a9d7cc3aedfafa942f1c9fd8e79807927a8ba8d3536cc3bc6474c9b4bee1
-
SHA512
523fd8da41de0cbf6e3aba83bfb9eb0d37ed0283aee332508142bc6886d0cddae68004b741485040fcb6ebd57d53d0f5cacb6b6117a2dfd9fe9d10fe01fee3cd
-
SSDEEP
3072:eXq9GtSp2cyEQN0Y+w0RGp3UOHkDK7Pk1AgQsld6nGS0/MVF9nnJJEDOPMpBqxt5:eXq9eV5+w0RGEOAoUod0/OJJrtlEs
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-31_5cdea7f9eb5668ea19690e9b06d6ee95_wannacry
Files
-
2024-12-31_5cdea7f9eb5668ea19690e9b06d6ee95_wannacry.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 239KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ