2026-07-05_7b5c2dcef72b4d0832d3566e2b05c872_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_7b5c2dcef72b4d0832d3566e2b05c872_elex_wannacry
Size 23KB
Sample260705-bvx3hsby5m
SHA256 1ebef497cffdf06df1fcf0fba91b7d02ad0a9e73e510456f8c1cd7ae78271605
MD5 7b5c2dcef72b4d0832d3566e2b05c872
SHA1 71e3141c26683bf8a02c612c8b077ed0916f92a7
SHA512 33a380c9e39e0b2e8184c0f0018ecd4cf3e6abe4c21a99ebbdffbcd67fc181d09f205a04a330ace5af454ffdea1749746564b2519d84cd377814e4b475b82d28
SSDEEP 384:PJ6f/9yZiiLmUdDwlpuCmCV7o8n3RznW62wREMTXpgl3+:xOpiPZwlQCmCV7o8n3RLQOZglO
TLSH
T197B2E70ADD25442AE4328AF39975287AE25F7EE32F5500C3D3C43E6D8575A82BE3811F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_7b5c2dcef72b4d0832d3566e2b05c872_elex_wannacry

File Explorer

2026-07-05_7b5c2dcef72b4d0832d3566e2b05c872_elex_wannacry

.exe 23KB

2026-07-05_7b5c2dcef72b4d0832d3566e2b05c872_elex_wannacry

IMPHASH 40903e9ce1861d8c5347421213b921a2
SHA256 1ebef497cffdf06df1fcf0fba91b7d02ad0a9e73e510456f8c1cd7ae78271605
MD5 7b5c2dcef72b4d0832d3566e2b05c872
SHA1 71e3141c26683bf8a02c612c8b077ed0916f92a7
SHA512 33a380c9e39e0b2e8184c0f0018ecd4cf3e6abe4c21a99ebbdffbcd67fc181d09f205a04a330ace5af454ffdea1749746564b2519d84cd377814e4b475b82d28
SSDEEP 384:PJ6f/9yZiiLmUdDwlpuCmCV7o8n3RznW62wREMTXpgl3+:xOpiPZwlQCmCV7o8n3RLQOZglO
TLSH
T197B2E70ADD25442AE4328AF39975287AE25F7EE32F5500C3D3C43E6D8575A82BE3811F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17796

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord3521 ord858 ord6402 ord561 ord3738 ord4424 ord4622 ord4080 ord3079 ord3825 ord3831 ord3830 ord3401 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord3259 ord800 ord3147 ord2982 ord3953 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord815 ord825 ord823 ord540 ord3522

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln _XcptFilter _exit _onexit __dllonexit srand rand memcmp div sprintf _strupr _except_handler3 strcpy wcslen strlen fprintf memset free ??1type_info@@UAE@XZ _CxxThrowException _ltoa strcat _strdup strstr fopen rewind fwrite fclose __CxxFrameHandler exit

kernel32

GetFileSize WideCharToMultiByte GetVolumeInformationA Sleep HeapFree HeapAlloc GetProcessHeap OpenProcess Process32Next Process32First lstrcpynA lstrcmpA GetVersionExA lstrlenA GetProcAddress LoadLibraryA GetModuleHandleA InterlockedIncrement InterlockedDecrement DeleteFileA GetCurrentThreadId GetTickCount GetStartupInfoA LocalFree CreateThread GetLastError GetSystemDirectoryA SetFileTime CloseHandle GetFileTime CreateFileA lstrcpyA GetWindowsDirectoryA

user32

IsCharAlphaNumericA wsprintfA DispatchMessageA TranslateMessage GetMessageA

advapi32

OpenProcessToken LookupAccountSidA GetUserNameA RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCloseKey GetTokenInformation

oleaut32

SysFreeString VariantCopy VariantInit VariantClear GetErrorInfo

ws2_32

socket accept WSAStartup recv htons

wininet

FindFirstUrlCacheEntryA FindNextUrlCacheEntryA FindCloseUrlCache DeleteUrlCacheEntry

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_7b5c2dcef72b4d0832d3566e2b05c872_elex_wannacry

mfc42

msvcrt

kernel32

user32

advapi32

oleaut32

ws2_32

wininet

generic