2026-05-22_7f092abe352ac96c97243dc37c1db451_amadey_elex_mespinoza_wannacry

General

Target
2026-05-22_7f092abe352ac96c97243dc37c1db451_amadey_elex_mespinoza_wannacry
Size 769KB
Sample260522-sdlrlahs2y
SHA256 da736cb52532791a39e33e5faa06938c5041d901e45b7ad48a00d41f6e95f5a1
MD5 7f092abe352ac96c97243dc37c1db451
SHA1 11f6d2aa90876a0dff36dfcb9324267364e20aeb
SHA512 e962daab09b5f955fc9dc89fde4675eb6bd8d574acd82973ccce94bd7914d2e54f2fdfb5388bcf851d0885eca449cc2f3c043d0f384360da5d298148d7af7924
SSDEEP 24576:0+2Jm/jlSmf6KeGUcgQW/MUSdGDd4K3ukpyLQ:ImUi6AjW/MUSdGRf3/T
TLSH
T14AF42A12AA90D435D16246389F65F31D52ACBD64CA138E4772983ECDFFF09C2AE152B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_7f092abe352ac96c97243dc37c1db451_amadey_elex_mespinoza_wannacry

File Explorer

2026-05-22_7f092abe352ac96c97243dc37c1db451_amadey_elex_mespinoza_wannacry

.exe 769KB

2026-05-22_7f092abe352ac96c97243dc37c1db451_amadey_elex_mespinoza_wannacry

SHA256 da736cb52532791a39e33e5faa06938c5041d901e45b7ad48a00d41f6e95f5a1
MD5 7f092abe352ac96c97243dc37c1db451
SHA1 11f6d2aa90876a0dff36dfcb9324267364e20aeb
SHA512 e962daab09b5f955fc9dc89fde4675eb6bd8d574acd82973ccce94bd7914d2e54f2fdfb5388bcf851d0885eca449cc2f3c043d0f384360da5d298148d7af7924
SSDEEP 24576:0+2Jm/jlSmf6KeGUcgQW/MUSdGDd4K3ukpyLQ:ImUi6AjW/MUSdGRf3/T
TLSH
T14AF42A12AA90D435D16246389F65F31D52ACBD64CA138E4772983ECDFFF09C2AE152B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

312099

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Office\Target\x86\ship\postc2r\x-none\protocolhandler.pdb

Name

.text

Size

317KB

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

113KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

90KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

360B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

164KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-22_7f092abe352ac96c97243dc37c1db451_amadey_elex_mespinoza_wannacry

generic