WannaCrypt 4.0 样本分析!哪种防毒能够防得住！

压缩包此文件也以下列压缩文件包提交给VirusTotal。
bdf8e52fcf44d1357940ab7902bce280e85bed1330f42491f9bcfb59d169bcc7

文件识别

MD5 ：60ab964a4ddf67b84682638970e77764
SHA1 ：16ccd53d8fb205bbad4f367e93448853be6520b8
SHA256 ：cd7542f2d7f2285ab524a57bc04ae1ad9306a15b9efbf56ea7b002d99d4b974f
ssdeep：3072:IqC7Q+F9LeowP0XX4wXXXXX4XBXXXXXXXXXXXbUYUYUUYYUYUYUYUYUYUUYUYUNe:bC7Q+FYoA03duZ
authentihash：  7282821854e64338828504e9d92d47f822cdeb715f10eeb9784f67c1bc21b6e2
imphash  ：f34d5f2d4577ed6d9ceec516c1f5a744
File size ：215.5 KB ( 220672 bytes )
File type ：Win32 EXE
Magic literal：PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
TrID        ：Generic CIL Executable (.NET, Mono, etc.) (55.8%)，Win64 Executable (generic) (21.0%)，Windows screen saver (9.9%)，Win32 Dynamic Link Library (generic) (5.0%)，Win32 Executable (generic) (3.4%)


VirusTotal元数据

First submission 2017-05-14 14:37:10 UTC ( 3 周, 1 天 前 )
Last submission 2017-05-14 14:37:10 UTC ( 3 周, 1 天 前 )
文件名        WannaCrypt 4.0.exe


高级启发式和声誉引擎

F-Secure Deepguard ：Suspicious:W32/Malware!Online


转至：Virustotal

本文不能采纳，仅提供参考而已。