2026-05-22_e0f600700e53846129d52563de77bf4e_amadey_elex_glassworm_vidar_wannacry

General

Target
2026-05-22_e0f600700e53846129d52563de77bf4e_amadey_elex_glassworm_vidar_wannacry
Size 1.6MB
Sample260522-vbftnsax3k
SHA256 52f9f19b0684e9f7fbdb3537241a62e876645e911242ad553aff7bdb1472c5f7
MD5 e0f600700e53846129d52563de77bf4e
SHA1 9c2e7f7aa3204062e615cc9f5f274b8a0fb0a0fd
SHA512 7f84ff677e919b3321d90bd33a9e9806e25d3de3c1ece9ee798b857de3467380c67be46e56041a216b027c21e1ca02382ec938c6ba37cb69630c4b259fde5993
SSDEEP 49152:+IiInsNBk9/fw2BwfmM0fTakOElMaFLkQqatglE:bsNi9Xwgwforak7Dn
TLSH
T123859D12F690A033D67202305E6A736637B8AD311F1A769BA3987F5D39B06F1AF11317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_e0f600700e53846129d52563de77bf4e_amadey_elex_glassworm_vidar_wannacry

2026-05-22_e0f600700e53846129d52563de77bf4e_amadey_elex_glassworm_vidar_wannacry

.exe 1.6MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 52f9f19b0684e9f7fbdb3537241a62e876645e911242ad553aff7bdb1472c5f7
MD5 e0f600700e53846129d52563de77bf4e
SHA1 9c2e7f7aa3204062e615cc9f5f274b8a0fb0a0fd
SHA512 7f84ff677e919b3321d90bd33a9e9806e25d3de3c1ece9ee798b857de3467380c67be46e56041a216b027c21e1ca02382ec938c6ba37cb69630c4b259fde5993
SSDEEP 49152:+IiInsNBk9/fw2BwfmM0fTakOElMaFLkQqatglE:bsNi9Xwgwforak7Dn
TLSH
T123859D12F690A033D67202305E6A736637B8AD311F1A769BA3987F5D39B06F1AF11317
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

155390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ComSvcConfig.pdb