WannaCrypt 4.0 样本分析!哪种防毒能够防得住！
压缩包此文件也以下列压缩文件包提交给VirusTotal。
bdf8e52fcf44d1357940ab7902bce280e85bed1330f42491f9bcfb59d169bcc7
文件识别
MD5 ：60ab964a4ddf67b84682638970e77764
SHA1 ：16ccd53d8fb205bbad4f367e93448853be6520b8
SHA256 ：cd7542f2d7f2285ab524a57bc04ae1ad9306a15b9efbf56ea7b002d99d4b974f
ssdeep：3072:IqC7Q+F9LeowP0XX4wXXXXX4XBXXXXXXXXXXXbUYUYUUYYUYUYUYUYUYUUYUYUNe:bC7Q+FYoA03duZ
authentihash：7282821854e64338828504e9d92d47f822cdeb715f10eeb9784f67c1bc21b6e2
imphash：f34d5f2d4577ed6d9ceec516c1f5a744
File size ：215.5 KB ( 220672 bytes )
File type ：Win32 EXE
Magic literal：PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
TrID ：Generic CIL Executable (.NET, Mono, etc.) (55.8%)，Win64 Executable (generic) (21.0%)，Windows screen saver (9.9%)，Win32 Dynamic Link Library (generic) (5.0%)，Win32 Executable (generic) (3.4%)
VirusTotal元数据
First submission 2017-05-14 14:37:10 UTC ( 3 周, 1 天 前 )
Last submission 2017-05-14 14:37:10 UTC ( 3 周, 1 天 前 )
文件名 WannaCrypt 4.0.exe
高级启发式和声誉引擎
F-Secure Deepguard ：Suspicious:W32/Malware!Online
转至：Virustotal
本文不能采纳，仅提供参考而已。
页:
[1]