2026-07-18_64d7d27ed7c9df056c21ef1e9aa9af44_elex_scribble_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-18_64d7d27ed7c9df056c21ef1e9aa9af44_elex_scribble_wannacry
Size 58KB
Sample260718-bd13vabs7k
SHA256 4c57e561c19ddfc0cac63d1919f39975cc4782bc816c1f7f6337adc2bdd0dbd7
MD5 64d7d27ed7c9df056c21ef1e9aa9af44
SHA1 40059da660899646d11473ed5e7bc6e50db4fb1e
SHA512 ad860ff2fe705c68d2bbc54c792231757df53cd3761fd39c41039b4d305ad6cf86763a5f455db58286584acd0c5a8bd45d2a83231a4c884d698f0fc227744673
SSDEEP 768:LhKENBPE7iJVuiL31PxUCmpJJEtN0ppqZDD9fUpwvdWUAohfjiT5edir:LhKENBnfblrmON0To9fUpwF0qfWT5Me
TLSH
T1C8431907ED8594F1E4210470146EB2BB96A71DA4865FFACAEF00EC5F6472394F83B14E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_64d7d27ed7c9df056c21ef1e9aa9af44_elex_scribble_wannacry

File Explorer

2026-07-18_64d7d27ed7c9df056c21ef1e9aa9af44_elex_scribble_wannacry

.exe 58KB

2026-07-18_64d7d27ed7c9df056c21ef1e9aa9af44_elex_scribble_wannacry

IMPHASH 7c045c1242f14ba5b518a0863a7815f1
SHA256 4c57e561c19ddfc0cac63d1919f39975cc4782bc816c1f7f6337adc2bdd0dbd7
MD5 64d7d27ed7c9df056c21ef1e9aa9af44
SHA1 40059da660899646d11473ed5e7bc6e50db4fb1e
SHA512 ad860ff2fe705c68d2bbc54c792231757df53cd3761fd39c41039b4d305ad6cf86763a5f455db58286584acd0c5a8bd45d2a83231a4c884d698f0fc227744673
SSDEEP 768:LhKENBPE7iJVuiL31PxUCmpJJEtN0ppqZDD9fUpwvdWUAohfjiT5edir:LhKENBnfblrmON0To9fUpwF0qfWT5Me
TLSH
T1C8431907ED8594F1E4210470146EB2BB96A71DA4865FFACAEF00EC5F6472394F83B14E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25167

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4837 ord4425 ord3597 ord1146 ord1168 ord324 ord4234 ord2379 ord755 ord470 ord3798 ord825 ord5280 ord4353 ord6374 ord5163 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord4710 ord4998 ord4853 ord4376 ord5265 ord1134 ord2514 ord641 ord815 ord561 ord3738 ord4424 ord4622 ord4080 ord3079 ord3825 ord3831 ord3830 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord3259 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4673 ord4627

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm _strrev rand __getmainargs _acmdln _XcptFilter _exit _onexit __dllonexit _except_handler3 strncmp exit sprintf __CxxFrameHandler strstr strcspn atoi strncpy

kernel32

EnumResourceNamesA FindResourceA LoadResource LockResource MoveFileExA OpenMutexA ReleaseMutex ExitProcess CreateThread WaitForSingleObject WriteFile CloseHandle CreateFileA EndUpdateResourceA lstrlenA GetTempPathA lstrcatA GetProcAddress WinExec LoadLibraryA Sleep GetComputerNameA GetLocaleInfoW GetModuleHandleA GetStartupInfoA TerminateProcess CreateProcessA ExitThread UpdateResourceA BeginUpdateResourceA GlobalFree ReadFile GlobalAlloc GetFileSize GetFileAttributesA lstrcpyA GetLastError CreateMutexA CopyFileA GetSystemDirectoryA GetTickCount lstrcpynA GlobalMemoryStatusEx

user32

EnableWindow IsIconic SendMessageA wsprintfA LoadIconA DrawIcon GetClientRect GetSystemMetrics

advapi32

RegSetValueExA StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA SetServiceStatus RegOpenKeyExA RegQueryValueExA RegCloseKey OpenSCManagerA OpenServiceA DeleteService RegOpenKeyA StartServiceA CreateServiceA CloseServiceHandle

ws2_32

WSAStartup send select __WSAFDIsSet recv setsockopt WSAIoctl htons socket connect closesocket gethostbyname inet_addr sendto WSASocketA htonl

winmm

timeGetTime

Name

2z90A

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

02N

Size

1024B

Virtual Size

768B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-18_64d7d27ed7c9df056c21ef1e9aa9af44_elex_scribble_wannacry

mfc42

msvcrt

kernel32

user32

advapi32

ws2_32

winmm

generic