2026-07-27_239b33b3f8699d7aff8b762d5d50b35b_amadey_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_239b33b3f8699d7aff8b762d5d50b35b_amadey_elex_wannacry
Size 2.6MB
Sample260727-r8mrpsgn21
SHA256 4948ed325ac916df74806c6c3042913702efa59bbd1074a61abb74785c15c7c3
MD5 239b33b3f8699d7aff8b762d5d50b35b
SHA1 0937dd3f644215e23a3370bf441de15f5a1b99e5
SHA512 f07cbf42dfad02dc4fe5abbf8904d0f7915a8b453893acbfb962f2378642b283bab48226d22634796fbaeb80e6314957f989dc0c67c79df77849067fdddee72f
SSDEEP 49152:2WTqmfFGMTV2WTqmfFGMhxBOp1B07sjsPEtd2znPrnIwuh0N8:TTqmfFGMTVTTqmfFGMhbOp1S7sjXqnmF
TLSH
T149D59E157AF8C237D6CA4530CE6CBBA470F9FA298E20588737C06E5D5F32885D326A5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_239b33b3f8699d7aff8b762d5d50b35b_amadey_elex_wannacry

File Explorer

2026-07-27_239b33b3f8699d7aff8b762d5d50b35b_amadey_elex_wannacry

.exe 2.6MB

2026-07-27_239b33b3f8699d7aff8b762d5d50b35b_amadey_elex_wannacry

IMPHASH 33caa6a83837abb6df3cadfee20ae0e9
SHA256 4948ed325ac916df74806c6c3042913702efa59bbd1074a61abb74785c15c7c3
MD5 239b33b3f8699d7aff8b762d5d50b35b
SHA1 0937dd3f644215e23a3370bf441de15f5a1b99e5
SHA512 f07cbf42dfad02dc4fe5abbf8904d0f7915a8b453893acbfb962f2378642b283bab48226d22634796fbaeb80e6314957f989dc0c67c79df77849067fdddee72f
SSDEEP 49152:2WTqmfFGMTV2WTqmfFGMhxBOp1B07sjsPEtd2znPrnIwuh0N8:TTqmfFGMTVTTqmfFGMhbOp1S7sjXqnmF
TLSH
T149D59E157AF8C237D6CA4530CE6CBBA470F9FA298E20588737C06E5D5F32885D326A5D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

347826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_ReplaceIcon InitCommonControlsEx CreateToolbarEx CreateStatusWindowW ord17 ImageList_GetImageCount ImageList_AddMasked ImageList_Create ImageList_Destroy PropertySheetW

comdlg32

CommDlgExtendedError GetOpenFileNameW

gdi32

DeleteObject

oleaut32

VariantClear SysAllocString SysAllocStringLen SysStringByteLen SysFreeString VariantCopy SysStringLen

ole32

CoTaskMemFree OleUninitialize OleInitialize CoUninitialize RevokeDragDrop DoDragDrop CoCreateInstance CoInitialize ReleaseStgMedium RegisterDragDrop CoTaskMemAlloc

user32

ChildWindowFromPointEx WindowFromPoint RegisterClipboardFormatW UpdateWindow SetTimer MapVirtualKeyW EnableMenuItem RemoveMenu CheckMenuRadioItem CheckMenuItem AppendMenuW GetMenu LoadMenuW IsWindowEnabled DrawMenuBar GetSubMenu GetParent IsDlgButtonChecked CheckDlgButton CheckRadioButton IsZoomed GetClientRect ReleaseCapture SetCapture GetCapture LoadIconW GetWindowPlacement SetWindowPlacement LoadAcceleratorsW GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW PostQuitMessage SetDlgItemTextW GetFocus GetKeyState InvalidateRect PostMessageW SetWindowTextW EndDialog EnableWindow DestroyWindow SetFocus CreatePopupMenu DestroyMenu LoadBitmapW MessageBoxW DefWindowProcW GetClassInfoW LoadCursorW RegisterClassW CallWindowProcW CreateWindowExW DialogBoxParamW SetWindowLongW GetWindowLongW ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect SystemParametersInfoW GetDialogBaseUnits GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW InsertMenuItemW SetMenuItemInfoW GetMenuItemInfoW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW GetCursorPos TrackPopupMenuEx GetMenuItemCount ClientToScreen SetCursor KillTimer DestroyIcon SetMenu

advapi32

GetFileSecurityW RegOpenKeyExA RegQueryValueExA LsaAddAccountRights LsaClose GetUserNameW LsaOpenPolicy LookupAccountNameW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegQueryValueExW RegSetValueExW RegEnumKeyExW RegDeleteKeyW RegCloseKey RegOpenKeyExW RegCreateKeyExW

shell32

SHChangeNotify ExtractIconExW ShellExecuteW SHGetSpecialFolderLocation SHFileOperationW ShellExecuteExW SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListW DragQueryFileW DragFinish SHGetMalloc SHGetDesktopFolder

msvcrt

memset _XcptFilter _exit _onexit __dllonexit ?terminate@@YAXXZ _controlfp __set_app_type __p__fmode ??1type_info@@UAE@XZ __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln __CxxFrameHandler memcpy memmove _CxxThrowException strcmp wcsstr wcscmp malloc free srand rand _except_handler3 wcslen strlen _purecall memcmp wcscat _beginthreadex exit

kernel32

GetSystemDefaultLangID GetUserDefaultLangID CopyFileW FindNextChangeNotification GetCompressedFileSizeW GetCommandLineW GetVersionExW InterlockedDecrement InterlockedIncrement AreFileApisANSI EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateEventW CreateFileMappingW MapViewOfFile UnmapViewOfFile WaitForSingleObject WaitForMultipleObjects GetStdHandle GetSystemTimeAsFileTime FileTimeToDosDateTime GlobalMemoryStatus lstrlenW FileTimeToLocalFileTime FileTimeToSystemTime CompareFileTime CreateProcessW GetCurrentProcess GlobalFree GlobalAlloc GetFileInformationByHandle SetEndOfFile Process32NextW ReadFile DeviceIoControl SetFilePointer GetFileSize GetLogicalDriveStringsW FindFirstChangeNotificationW FindCloseChangeNotification GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindClose GlobalSize GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetWindowsDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryW LoadLibraryExW FreeLibrary GlobalLock GlobalUnlock HeapAlloc GetProcessHeap HeapFree GetModuleHandleW GetProcAddress GetDiskFreeSpaceW GetDriveTypeW GetVolumeInformationW WideCharToMultiByte MultiByteToWideChar GetLastError GetTickCount Process32FirstW CreateToolhelp32Snapshot Sleep SetPriorityClass ExpandEnvironmentStringsW VirtualAlloc VirtualFree SetEvent InitializeCriticalSection LoadLibraryA LocalAlloc GetCurrentThreadId OpenProcess InterlockedExchange RaiseException GetStartupInfoA WriteFile

Name

.text

Size

368KB

Virtual Size

368KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

79KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_239b33b3f8699d7aff8b762d5d50b35b_amadey_elex_wannacry

comctl32

comdlg32

gdi32

oleaut32

ole32

user32

advapi32

shell32

msvcrt

kernel32

generic