2026-07-30_fb316f755fdd2ed8cd1ed7e8f0fd76d0_elex_wannacry

General

Target
2026-07-30_fb316f755fdd2ed8cd1ed7e8f0fd76d0_elex_wannacry
Size 76KB
Sample260730-fbav4abh45
SHA256 565ff1193362234930f09ebb0d83d5e3ce937d692f0f9fab729653791a2b3103
MD5 fb316f755fdd2ed8cd1ed7e8f0fd76d0
SHA1 4c497da1f9c2673b05c25a454e82c226e5e059a0
SHA512 c0adce8961c3f0499cca027f92965b1bb7cb4171e4f15f2e988a3c843fd638a35281bc854ad8ead76290dcc5fcb571662be018c5b32a9b2336c04977cc706527
SSDEEP 768:vvw9816vhKQLrot/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0ot/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T136736C03A584B5F2EBAC0135B19F1FBE563B86B1C4C9282F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Custom signature

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_fb316f755fdd2ed8cd1ed7e8f0fd76d0_elex_wannacry

SHA256 565ff1193362234930f09ebb0d83d5e3ce937d692f0f9fab729653791a2b3103
MD5 fb316f755fdd2ed8cd1ed7e8f0fd76d0
SHA1 4c497da1f9c2673b05c25a454e82c226e5e059a0
SHA512 c0adce8961c3f0499cca027f92965b1bb7cb4171e4f15f2e988a3c843fd638a35281bc854ad8ead76290dcc5fcb571662be018c5b32a9b2336c04977cc706527
SSDEEP 768:vvw9816vhKQLrot/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0ot/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T136736C03A584B5F2EBAC0135B19F1FBE563B86B1C4C9282F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths