2026-07-30_e7d5bf505f220c2b986a340a33d7902a_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_e7d5bf505f220c2b986a340a33d7902a_elex_wannacry
Size 1.1MB
Sample260730-jjjpradh74
SHA256 4622cff2ab554cfb6749022aa0122ae3d1ae7586cf67ef609c11e820ad764491
MD5 e7d5bf505f220c2b986a340a33d7902a
SHA1 fa993431b389c8ba7f320c0106d3bff962df3ba9
SHA512 f3a63ce1c998d2d0544ee12f6e7195a6793b6f5e6c39e9db1402522dd03374f536c280bae3b27416a080ea401974602babc33fe6ed451623c75ebdd194352b75
SSDEEP 24576:bWvknOMEdodXwHcp8d5sIn4m/3/tL8K92qQEAOsjW2QHyolDpEJakY:bUeOMcoFwHcS7im/F4KJBxsa9lDpEJaJ
TLSH
T18E4502203FE4D877C1A20639CAA5FBA5A1A9FF1A8F34846732C11F5F2D3A445C53961B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-30_e7d5bf505f220c2b986a340a33d7902a_elex_wannacry

File Explorer

2026-07-30_e7d5bf505f220c2b986a340a33d7902a_elex_wannacry

.exe 1.1MB

2026-07-30_e7d5bf505f220c2b986a340a33d7902a_elex_wannacry

IMPHASH 1f4dc9aa893a3c5fdfc9623903183e73
SHA256 4622cff2ab554cfb6749022aa0122ae3d1ae7586cf67ef609c11e820ad764491
MD5 e7d5bf505f220c2b986a340a33d7902a
SHA1 fa993431b389c8ba7f320c0106d3bff962df3ba9
SHA512 f3a63ce1c998d2d0544ee12f6e7195a6793b6f5e6c39e9db1402522dd03374f536c280bae3b27416a080ea401974602babc33fe6ed451623c75ebdd194352b75
SSDEEP 24576:bWvknOMEdodXwHcp8d5sIn4m/3/tL8K92qQEAOsjW2QHyolDpEJakY:bUeOMcoFwHcS7im/F4KJBxsa9lDpEJaJ
TLSH
T18E4502203FE4D877C1A20639CAA5FBA5A1A9FF1A8F34846732C11F5F2D3A445C53961B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5b:7f:cc:76:f0:2b:62:c7:77:97:eb:01:d6:46:87:00:c3:cd:da:2d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Install Assistant,O=Install Assistant,L=Wilmington,ST=Delaware,C=US

Chains

Jul 27, 2026

CN=Install Assistant,O=Install Assistant,L=Wilmington,ST=Delaware,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

CN=Install Assistant,O=Install Assistant,L=Wilmington,ST=Delaware,C=US

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

Major OS version

Entry point

119394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysAllocString SysFreeString VariantClear

ole32

CoInitialize CoUninitialize

user32

MessageBoxW wsprintfA SetDlgItemTextA MapDialogRect ScreenToClient InvalidateRect SetTimer DialogBoxParamW DialogBoxParamA SetWindowLongA GetWindowLongA GetWindowRect ShowWindow MoveWindow SystemParametersInfoA GetWindowTextLengthW SetCursor GetWindowTextLengthA GetWindowTextA SetWindowTextW SetWindowTextA SendMessageW LoadStringW LoadStringA CharUpperW CharUpperA IsDlgButtonChecked EndDialog GetDlgItem LoadIconA SendMessageA PostMessageA LoadCursorA KillTimer GetWindowTextW

shell32

SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA

msvcrt

__p__commode __p__fmode __set_app_type _controlfp __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ??1type_info@@UAE@XZ _except_handler3 _beginthreadex memset wcslen memcpy free malloc _CxxThrowException memmove _purecall memcmp __CxxFrameHandler _adjust_fdiv

kernel32

GetStartupInfoA GetModuleHandleA InitializeCriticalSection ResetEvent SetEvent CreateEventA WaitForSingleObject VirtualFree VirtualAlloc GetCurrentProcess SetPriorityClass lstrcatA GetTickCount Sleep FileTimeToLocalFileTime WaitForMultipleObjects EnterCriticalSection LeaveCriticalSection GetStdHandle GetModuleHandleW GetProcAddress FileTimeToSystemTime SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize CreateFileA FindFirstFileW FindFirstFileA FindClose GetCurrentDirectoryW GetCurrentDirectoryA GetFullPathNameW GetFullPathNameA lstrlenA DeleteFileW DeleteFileA CreateDirectoryW CreateDirectoryA MoveFileW RemoveDirectoryW SetFileAttributesW MoveFileA RemoveDirectoryA SetLastError CreateFileW SetFileTime CloseHandle FormatMessageW FormatMessageA LocalFree GetModuleFileNameW GetModuleFileNameA AreFileApisANSI GetLastError WideCharToMultiByte MultiByteToWideChar DeleteCriticalSection GetVersionExA GetCommandLineW SetFileAttributesA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_e7d5bf505f220c2b986a340a33d7902a_elex_wannacry

PE Signature issue

oleaut32

ole32

user32

shell32

msvcrt

kernel32

generic