2026-07-10_030427e890a7f837976604da4fdbb740_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_030427e890a7f837976604da4fdbb740_elex_wannacry
Size 216KB
Sample260710-e8b9rac16n
SHA256 40ada2838c843b1fced3fa9cfa2fbf55cf7eaab89a0270a3f8246d01bb1b54e4
MD5 030427e890a7f837976604da4fdbb740
SHA1 2f0aa62d24c23e804f34f2c48cd9054fdd5209e7
SHA512 704cb9eccb3e6b31e7f0d0466794903597f1dfdc55de18d2819476a2bd62477141847c88b3a55b7fd645d2e97680c8a7d27df1e5c7e758e2234551fdff3b5d5b
SSDEEP 1536:KcOhF4+pi+sCeyDS8N6DcXlfIesaniUjIjR:KcOfiJyDS8N6D2lfIePiU8d
TLSH
T133247C01BAC485FAEA78113244EAB77ADB3AF4784729BE87730CDD651816044E7633DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_030427e890a7f837976604da4fdbb740_elex_wannacry

File Explorer

2026-07-10_030427e890a7f837976604da4fdbb740_elex_wannacry

.exe 216KB

2026-07-10_030427e890a7f837976604da4fdbb740_elex_wannacry

IMPHASH e9c3c56c3fe431ad8b8aa77f75f039d1
SHA256 40ada2838c843b1fced3fa9cfa2fbf55cf7eaab89a0270a3f8246d01bb1b54e4
MD5 030427e890a7f837976604da4fdbb740
SHA1 2f0aa62d24c23e804f34f2c48cd9054fdd5209e7
SHA512 704cb9eccb3e6b31e7f0d0466794903597f1dfdc55de18d2819476a2bd62477141847c88b3a55b7fd645d2e97680c8a7d27df1e5c7e758e2234551fdff3b5d5b
SSDEEP 1536:KcOhF4+pi+sCeyDS8N6DcXlfIesaniUjIjR:KcOfiJyDS8N6D2lfIePiU8d
TLSH
T133247C01BAC485FAEA78113244EAB77ADB3AF4784729BE87730CDD651816044E7633DB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

74493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

??3@YAXPAX@Z memmove ceil _ftol strstr __CxxFrameHandler ??2@YAPAXI@Z free _strnicmp _controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln _XcptFilter _exit _onexit __dllonexit calloc _beginthreadex _strcmpi strchr strncat exit printf time srand rand atoi strrchr _except_handler3 malloc

kernel32

CancelIo Sleep DeleteFileA GetLastError CreateDirectoryA GetFileAttributesA lstrlenA CreateProcessA lstrcatA GetLogicalDriveStringsA FindClose InterlockedExchange RemoveDirectoryA GetFileSize CreateFileA ReadFile SetFilePointer WriteFile MoveFileA GetCurrentProcess OpenProcess CreateThread GetTickCount TerminateThread WinExec OutputDebugStringA GetModuleFileNameA GlobalFree GlobalUnlock GlobalLock GlobalAlloc GlobalSize GetSystemDirectoryA CreatePipe DisconnectNamedPipe TerminateProcess PeekNamedPipe WaitForMultipleObjects GlobalMemoryStatus GetSystemInfo GetVersionExA ReleaseMutex OpenEventA SetErrorMode SetEvent LocalSize Process32Next Process32First CreateToolhelp32Snapshot lstrcmpiA GetModuleHandleA GetStartupInfoA lstrcpyA CloseHandle LoadLibraryA GetProcAddress VirtualAlloc EnterCriticalSection LeaveCriticalSection VirtualFree DeleteCriticalSection InitializeCriticalSection LocalAlloc CopyFileA

user32

IsWindowVisible CharNextA wsprintfA LoadCursorA DestroyCursor BlockInput SystemParametersInfoA SendMessageA MapVirtualKeyA SetCapture WindowFromPoint SetCursorPos mouse_event CloseClipboard SetClipboardData GetClipboardData GetSystemMetrics SetRect GetDC GetDesktopWindow IsWindow CloseWindow CreateWindowExA PostMessageA GetThreadDesktop GetUserObjectInformationA OpenInputDesktop SetThreadDesktop CloseDesktop EnumWindows GetWindowTextA GetCursorPos GetWindowThreadProcessId ExitWindowsEx GetProcessWindowStation OpenWindowStationA SetProcessWindowStation GetCursorInfo ReleaseDC

gdi32

BitBlt GetDIBits CreateCompatibleBitmap DeleteObject CreateCompatibleDC CreateDIBSection DeleteDC SelectObject

advapi32

RegOpenKeyA RegQueryValueA RegDeleteKeyA RegDeleteValueA RegEnumKeyExA RegEnumValueA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges OpenEventLogA ClearEventLogA CloseEventLog RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA OpenServiceA ControlService DeleteService CloseServiceHandle RegCloseKey

shell32

SHGetSpecialFolderPathA

ws2_32

getsockname gethostname WSAGetLastError inet_ntoa WSACleanup WSAStartup htonl sendto inet_addr send select closesocket recv ntohs socket gethostbyname htons connect setsockopt

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?_Xran@std@@YAXXZ ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

mfc42

ord537 ord6648 ord2764 ord4129 ord926 ord924 ord922 ord535 ord540 ord858 ord6663 ord860 ord4278 ord2818 ord939 ord6877 ord800

avicap32

capCreateCaptureWindowA capGetDriverDescriptionA

msvfw32

ICSeqCompressFrameEnd ICCompressorFree ICClose ICOpen ICSendMessage ICSeqCompressFrameStart ICSeqCompressFrame

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_030427e890a7f837976604da4fdbb740_elex_wannacry

msvcrt

kernel32

user32

gdi32

advapi32

shell32

ws2_32

msvcp60

mfc42

avicap32

msvfw32

generic