2026-07-29_b3640a6f2c1e6fe80b3a3ffddeb86376_elex_wannacry

General

Target
2026-07-29_b3640a6f2c1e6fe80b3a3ffddeb86376_elex_wannacry
Size 30KB
Sample260729-19jacatelf
SHA256 3fc3687fe60d04779ee7c772ef36948fe466666c577ab6e69d7f2ca4b45ecabe
MD5 b3640a6f2c1e6fe80b3a3ffddeb86376
SHA1 500883106df4eed7346ad0aa6e6c96661b1c71fd
SHA512 752bf66cd09d605f66079900319303688770b986536f00338aac3f157b7a2e0987fff2294fd5cd9364aa6d0fa5c37654ae93d32d814c8472d7d5d5636f22f566
SSDEEP 384:q/JYSrFQjG1zHNHP1XYpMYUzMk9hBcecy:g/3191XN/zoy
TLSH
T1B8D284E2E74148E8D8039EBC84367943A143A15D9E2A9A5D19D27F067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-29_b3640a6f2c1e6fe80b3a3ffddeb86376_elex_wannacry

SHA256 3fc3687fe60d04779ee7c772ef36948fe466666c577ab6e69d7f2ca4b45ecabe
MD5 b3640a6f2c1e6fe80b3a3ffddeb86376
SHA1 500883106df4eed7346ad0aa6e6c96661b1c71fd
SHA512 752bf66cd09d605f66079900319303688770b986536f00338aac3f157b7a2e0987fff2294fd5cd9364aa6d0fa5c37654ae93d32d814c8472d7d5d5636f22f566
SSDEEP 384:q/JYSrFQjG1zHNHP1XYpMYUzMk9hBcecy:g/3191XN/zoy
TLSH
T1B8D284E2E74148E8D8039EBC84367943A143A15D9E2A9A5D19D27F067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

24786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths