Behavioral task
behavioral1
Sample
2025-03-19_8f9f97e9eb11140e24301d97bb038a91_destroyer_wannacry.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-03-19_8f9f97e9eb11140e24301d97bb038a91_destroyer_wannacry.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-03-19_8f9f97e9eb11140e24301d97bb038a91_destroyer_wannacry
-
Size
23KB
-
MD5
8f9f97e9eb11140e24301d97bb038a91
-
SHA1
1999c7e62cf9c2d7cacd45a25da026ec068ae8f9
-
SHA256
c98d3f45f8ca42ff4dd659076d9095300b9df5ecd095fb62f3f2bb953bd436a1
-
SHA512
7c48279443f53e0c16573448fb9000866e9f53ad55bf7e2fabe07f6888e3855864f7a9bb4e59ba903a5959f49959aa5fa0aa8940317643550e467de70d7d06e9
-
SSDEEP
384:h3MLWHn3kIMEr7FHlFLc+pLdTTeJqr91Cz2clOrVbbbbbbbbbbbbbbbbbbbbbbbu:hn3kIz7tlJc+pLVmqr9i2clOrVbbbbbu
Malware Config
Signatures
-
Chaos Ransomware 1 IoCs
resource yara_rule sample family_chaos -
Chaos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-03-19_8f9f97e9eb11140e24301d97bb038a91_destroyer_wannacry
Files
-
2025-03-19_8f9f97e9eb11140e24301d97bb038a91_destroyer_wannacry.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 374KB - Virtual size: 374KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ