2026-05-31_edc47f1ebd35e88e53483975fd4ebb59_amadey_elex_mespinoza_vidar_wannacry

General

Target
2026-05-31_edc47f1ebd35e88e53483975fd4ebb59_amadey_elex_mespinoza_vidar_wannacry
Size 922KB
Sample260531-rrfbasas6s
SHA256 9a2364b73526abbe1916c972be307bf74d621d64d5913ad40e9cf254072db19a
MD5 edc47f1ebd35e88e53483975fd4ebb59
SHA1 839a31a841689b25e343d51e9cb54ef18ebdd3db
SHA512 71a2b75681b18548b94e9ca5276730b9238ce6240b2ad13ce6ce34195d55dd1a61fa98536c63b53584595bb3a18ad3b0a6ff9ab7d30f7900453ffac89700be2b
SSDEEP 12288:0AlHOswKgiTWpCrui8C+lPY/0dUIVlN9kTjkWIw2y:04HOsRgiiplc+lPY/0HVlN9kTiw2y
TLSH
T18015D6063AE84471E4A259304A61965D9775B850DB338ECF22906EEEFFF3AD09D34732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-31_edc47f1ebd35e88e53483975fd4ebb59_amadey_elex_mespinoza_vidar_wannacry

File Explorer

2026-05-31_edc47f1ebd35e88e53483975fd4ebb59_amadey_elex_mespinoza_vidar_wannacry

.exe 922KB

2026-05-31_edc47f1ebd35e88e53483975fd4ebb59_amadey_elex_mespinoza_vidar_wannacry

SHA256 9a2364b73526abbe1916c972be307bf74d621d64d5913ad40e9cf254072db19a
MD5 edc47f1ebd35e88e53483975fd4ebb59
SHA1 839a31a841689b25e343d51e9cb54ef18ebdd3db
SHA512 71a2b75681b18548b94e9ca5276730b9238ce6240b2ad13ce6ce34195d55dd1a61fa98536c63b53584595bb3a18ad3b0a6ff9ab7d30f7900453ffac89700be2b
SSDEEP 12288:0AlHOswKgiTWpCrui8C+lPY/0dUIVlN9kTjkWIw2y:04HOsRgiiplc+lPY/0HVlN9kTiw2y
TLSH
T18015D6063AE84471E4A259304A61965D9775B850DB338ECF22906EEEFFF3AD09D34732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

94229

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\Office\Target\x86\ship\postc2r\x-none\msosrec.pdb

Name

.text

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2r

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-31_edc47f1ebd35e88e53483975fd4ebb59_amadey_elex_mespinoza_vidar_wannacry

generic