2026-04-15_16972091fd15508a172ebde24dd5e3d3_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-15_16972091fd15508a172ebde24dd5e3d3_elex_wannacry
Size 324KB
Sample260415-e1nmtaew6p
SHA256 02d67a1f77ad750dcd867c950d40c119f899c6c8974fe759257b608f173cc168
MD5 16972091fd15508a172ebde24dd5e3d3
SHA1 d8c5aa2f69e6303588e666071225c7ba1228f247
SHA512 1d95eb613d604eaf0c2108a7da20354633124e336edde1f16da0d969be973dd5e9956ac52217a2039fd4360557ebe399d20105ae370204fe137002f0cb673cf9
SSDEEP 3072:FRoTSgQHfT5h+T3GuGYeO6bUT3JyDhkUAyLj6lgvqcOoyqsu/T2JS5073VLn:FRoSgWtkT3sO6bSZMhRrygvjpsASJV7x
TLSH
T18864AF1275C0C8EAC1853973CD75B6F4E3E9CEE8C9329A6B17E43E4D7E3A5049702269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_16972091fd15508a172ebde24dd5e3d3_elex_wannacry

File Explorer

2026-04-15_16972091fd15508a172ebde24dd5e3d3_elex_wannacry

.exe 324KB

2026-04-15_16972091fd15508a172ebde24dd5e3d3_elex_wannacry

IMPHASH fc3a840015f6dc1a1b745a75c370fe1a
SHA256 02d67a1f77ad750dcd867c950d40c119f899c6c8974fe759257b608f173cc168
MD5 16972091fd15508a172ebde24dd5e3d3
SHA1 d8c5aa2f69e6303588e666071225c7ba1228f247
SHA512 1d95eb613d604eaf0c2108a7da20354633124e336edde1f16da0d969be973dd5e9956ac52217a2039fd4360557ebe399d20105ae370204fe137002f0cb673cf9
SSDEEP 3072:FRoTSgQHfT5h+T3GuGYeO6bUT3JyDhkUAyLj6lgvqcOoyqsu/T2JS5073VLn:FRoSgWtkT3sO6bSZMhRrygvjpsASJV7x
TLSH
T18864AF1275C0C8EAC1853973CD75B6F4E3E9CEE8C9329A6B17E43E4D7E3A5049702269
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord825 ord815 ord823 ord2514 ord2621 ord1134 ord641 ord800 ord5265 ord4376 ord4853 ord4998 ord4710 ord6052 ord4078 ord1775 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord2976 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord324 ord4234 ord1146 ord1168 ord860 ord540 ord2301 ord2370 ord4160 ord2863 ord2379 ord755 ord470 ord6199 ord3092 ord2818 ord941 ord6334 ord2642 ord3081 ord2985 ord3262 ord3136 ord4465 ord1576 ord3259 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4441 ord4673

msvcrt

time memset memcpy __CxxFrameHandler rand __p___argv _setmbcp _EH_prolog strlen strcpy clock ??0exception@@QAE@ABV0@@Z _CxxThrowException toupper _except_handler3 tolower ??1exception@@UAE@XZ isspace _purecall _isctype __dllonexit _onexit ??1type_info@@UAE@XZ _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _controlfp __set_app_type __p__fmode __p__commode srand _adjust_fdiv

kernel32

DeleteFileA CloseHandle ReadFile CreateFileA ExitProcess WinExec WriteFile GetTempPathA Sleep CreateProcessA GetModuleFileNameA CopyFileA SetFilePointer SetFileAttributesA CreateDirectoryA LockResource SizeofResource LoadResource FindResourceA VirtualProtect VirtualAlloc VirtualFree GetSystemInfo VirtualQuery GetVersionExA GetModuleHandleA GetStartupInfoA GetTickCount

user32

EnableWindow IsIconic GetSystemMetrics GetClientRect DrawIcon GetSystemMenu SendMessageA LoadIconA wsprintfA AppendMenuA

msvcp60

??_7logic_error@std@@6B@ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIID@Z ??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z ??_7out_of_range@std@@6B@ ??1out_of_range@std@@UAE@XZ ??0out_of_range@std@@QAE@ABV01@@Z ??0logic_error@std@@QAE@ABV01@@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD0@Z ??0bad_alloc@std@@QAE@ABV01@@Z ??1bad_alloc@std@@UAE@XZ ??0bad_alloc@std@@QAE@PBD@Z wctype ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@XZ ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z ?what@logic_error@std@@UBEPBDXZ

Name

.text

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fsp

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mmym520

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-15_16972091fd15508a172ebde24dd5e3d3_elex_wannacry

mfc42

msvcrt

kernel32

user32

msvcp60

generic