2026-06-02_83e1adf835fdb098fb01edc5b13bf63c_elex_scribble_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-02_83e1adf835fdb098fb01edc5b13bf63c_elex_scribble_wannacry
Size 277KB
Sample260602-sdkvasgt4w
SHA256 b6bcc84720a4c1400856778a9d624669893557db53df62298a67304baf6dcbd6
MD5 83e1adf835fdb098fb01edc5b13bf63c
SHA1 9da40b85fc78a3dbb35bec89364391bcddcb2bb0
SHA512 54133b962218973bab1cd33051174250a595744e3a75460124c5a2053b9cad57c82efa7bdc7f1bb989a96cc227261a2f6e82f53b13521b44ef79eb242320190c
SSDEEP 6144:QRb81pwynD21fjdJ8rIaROqCqCTAlgdg29Bdt:QYi1rcJPC7xg2bdt
TLSH
T160546CBED86C044EF80D6AB9C9365DB8C3BEB9662585450F716CAC1AD4125E0BFC7F08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-02_83e1adf835fdb098fb01edc5b13bf63c_elex_scribble_wannacry

File Explorer

2026-06-02_83e1adf835fdb098fb01edc5b13bf63c_elex_scribble_wannacry

.exe 277KB

2026-06-02_83e1adf835fdb098fb01edc5b13bf63c_elex_scribble_wannacry

IMPHASH 7c045c1242f14ba5b518a0863a7815f1
SHA256 b6bcc84720a4c1400856778a9d624669893557db53df62298a67304baf6dcbd6
MD5 83e1adf835fdb098fb01edc5b13bf63c
SHA1 9da40b85fc78a3dbb35bec89364391bcddcb2bb0
SHA512 54133b962218973bab1cd33051174250a595744e3a75460124c5a2053b9cad57c82efa7bdc7f1bb989a96cc227261a2f6e82f53b13521b44ef79eb242320190c
SSDEEP 6144:QRb81pwynD21fjdJ8rIaROqCqCTAlgdg29Bdt:QYi1rcJPC7xg2bdt
TLSH
T160546CBED86C044EF80D6AB9C9365DB8C3BEB9662585450F716CAC1AD4125E0BFC7F08
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

313464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4837 ord4425 ord3597 ord1146 ord1168 ord324 ord4234 ord2379 ord755 ord470 ord3798 ord825 ord5280 ord4353 ord6374 ord5163 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord4710 ord4998 ord4853 ord4376 ord5265 ord1134 ord2514 ord641 ord815 ord561 ord3738 ord4424 ord4622 ord4080 ord3079 ord3825 ord3831 ord3830 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord3259 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4673 ord4627

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm _strrev rand __getmainargs _acmdln _XcptFilter _exit _onexit __dllonexit _except_handler3 strncmp exit sprintf __CxxFrameHandler strstr strcspn atoi strncpy

kernel32

EnumResourceNamesA FindResourceA LoadResource LockResource MoveFileExA OpenMutexA ReleaseMutex ExitProcess CreateThread WaitForSingleObject WriteFile CloseHandle CreateFileA EndUpdateResourceA lstrlenA GetTempPathA lstrcatA GetProcAddress WinExec LoadLibraryA Sleep GetComputerNameA GetLocaleInfoW GetModuleHandleA GetStartupInfoA TerminateProcess CreateProcessA ExitThread UpdateResourceA BeginUpdateResourceA GlobalFree ReadFile GlobalAlloc GetFileSize GetFileAttributesA lstrcpyA GetLastError CreateMutexA CopyFileA GetSystemDirectoryA GetTickCount lstrcpynA GlobalMemoryStatusEx

user32

EnableWindow IsIconic SendMessageA wsprintfA LoadIconA DrawIcon GetClientRect GetSystemMetrics

advapi32

RegSetValueExA StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA SetServiceStatus RegOpenKeyExA RegQueryValueExA RegCloseKey OpenSCManagerA OpenServiceA DeleteService RegOpenKeyA StartServiceA CreateServiceA CloseServiceHandle

ws2_32

WSAStartup send select __WSAFDIsSet recv setsockopt WSAIoctl htons socket connect closesocket gethostbyname inet_addr sendto WSASocketA htonl

winmm

timeGetTime

Name

2z90A

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

02N

Size

1024B

Virtual Size

768B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

39KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ofyihwk

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

dbfglnf

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

rahkwif

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

gfzifap

Size

31KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

przqqlr

Size

87KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-02_83e1adf835fdb098fb01edc5b13bf63c_elex_scribble_wannacry

mfc42

msvcrt

kernel32

user32

advapi32

ws2_32

winmm

generic