2026-07-30_49c556d8c63316da5c8abd30c7dbfb1b_elex_wannacry

General

Target
2026-07-30_49c556d8c63316da5c8abd30c7dbfb1b_elex_wannacry
Size 76KB
Sample260730-gd9ymst1bs
SHA256 543ec1d08a5d8eba5d86e53444a1f6cb1423e7e26566c3ece13cb19b550a589b
MD5 49c556d8c63316da5c8abd30c7dbfb1b
SHA1 71bd0f3c4d8bd3c70f3b8fc429e5567a1a626489
SHA512 59f700149ef13d5cdb924db4088dd597c85bdf7d9e63a071a1259555694e78ab6dcc22aadb9328dd4544e79cfa6cfd3501275275eb009ba75683ee997d2a2061
SSDEEP 768:vvw9816vhKQLron/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0on/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T150736C03A584B5F2EBAC0135B19F1FBE563B86B1C4C9282F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_49c556d8c63316da5c8abd30c7dbfb1b_elex_wannacry

SHA256 543ec1d08a5d8eba5d86e53444a1f6cb1423e7e26566c3ece13cb19b550a589b
MD5 49c556d8c63316da5c8abd30c7dbfb1b
SHA1 71bd0f3c4d8bd3c70f3b8fc429e5567a1a626489
SHA512 59f700149ef13d5cdb924db4088dd597c85bdf7d9e63a071a1259555694e78ab6dcc22aadb9328dd4544e79cfa6cfd3501275275eb009ba75683ee997d2a2061
SSDEEP 768:vvw9816vhKQLron/4/QQP5EQcpFnbMgDa1GQTTyS1tl7lfqvocqcd/V9:nEGh0on/Fa5EQcpGgDa1rnyS1loL/L
TLSH
T150736C03A584B5F2EBAC0135B19F1FBE563B86B1C4C9282F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths