2026-07-31_c3aeadff5494797162cf2d0e1d4c0f17_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_c3aeadff5494797162cf2d0e1d4c0f17_elex_wannacry
Size 576KB
Sample260731-c2w98sbd72
SHA256 149449c35a23edfca3a1ed972638806b5d5ab5783c4373421fc3498a7203476b
MD5 c3aeadff5494797162cf2d0e1d4c0f17
SHA1 87d7245a5994291f7b7b41e4adae86d13958a65b
SHA512 48ea72d972d9d2905cdffd974fc8f453609173c7ed306e3834814c4bcd1edb37fb77811f1880e37bc1325e8f418deddc9a4797a149cba5ec66e2e0634d368a30
SSDEEP 768:q8C/+G7W89yFPcnYblHg1C2E9YceZ3JeFZ7K:lC/+GfeEnGg1C2E9YceZ38Z
TLSH
T1A7C4298363C90973F51552708C9A7BB5D73374EA021647ABEBA1DC3688737A4E83914B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_c3aeadff5494797162cf2d0e1d4c0f17_elex_wannacry

File Explorer

2026-07-31_c3aeadff5494797162cf2d0e1d4c0f17_elex_wannacry

.exe 576KB

2026-07-31_c3aeadff5494797162cf2d0e1d4c0f17_elex_wannacry

IMPHASH 1a3389affb3da78552b91c1c935053df
SHA256 149449c35a23edfca3a1ed972638806b5d5ab5783c4373421fc3498a7203476b
MD5 c3aeadff5494797162cf2d0e1d4c0f17
SHA1 87d7245a5994291f7b7b41e4adae86d13958a65b
SHA512 48ea72d972d9d2905cdffd974fc8f453609173c7ed306e3834814c4bcd1edb37fb77811f1880e37bc1325e8f418deddc9a4797a149cba5ec66e2e0634d368a30
SSDEEP 768:q8C/+G7W89yFPcnYblHg1C2E9YceZ3JeFZ7K:lC/+GfeEnGg1C2E9YceZ38Z
TLSH
T1A7C4298363C90973F51552708C9A7BB5D73374EA021647ABEBA1DC3688737A4E83914B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25791

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

hpzjsn01

??1Oid@@UAE@XZ ??1Vb@@QAE@XZ ??1Pdu@@QAE@XZ ?get_value@Vb@@QAEHPAEAAKK@Z ?get_vb@Pdu@@QBEHAAVVb@@H@Z ?get@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z ??YPdu@@QAEAAV0@AAVVb@@@Z ??0Pdu@@QAE@XZ ??0Vb@@QAE@ABVOid@@@Z ??0Snmp@@QAE@AAHG@Z ?set_timeout@SnmpTarget@@QAEXK@Z ?set_retry@SnmpTarget@@QAEXH@Z ??0CTarget@@QAE@ABVAddress@@@Z ??0Oid@@QAE@PBD@Z ??0IpAddress@@QAE@PBD@Z initSNMP ??1SnmpUInt32@@UAE@XZ ??1CTarget@@UAE@XZ ??1Snmp@@QAE@XZ uninitSNMP ?get_notify_filter@Snmp@@UAEHAAV?$SnmpCollection@VOid@@@@AAV?$SnmpCollection@VCTarget@@@@@Z ?notify_unregister@Snmp@@UAEHXZ ?notify_register@Snmp@@UAEHABV?$SnmpCollection@VOid@@@@ABV?$SnmpCollection@VCTarget@@@@Q6AXHPAV1@AAVPdu@@AAVSnmpTarget@@PAX@ZPBX@Z ?notify_register@Snmp@@UAEHABV?$SnmpCollection@VOid@@@@ABV?$SnmpCollection@VCTarget@@@@ABV?$SnmpCollection@VGenAddress@@@@Q6AXHPAV1@AAVPdu@@AAVSnmpTarget@@PAX@ZPBX@Z ?inform@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z ?inform@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z ?trap@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z ?get_bulk@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@HH@Z ?get_bulk@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@HHQ6AXHPAV1@01PAX@ZPBX@Z ?set@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z ?set@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z ?get_next@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@@Z ?get_next@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z ?get@Snmp@@UAEHAAVPdu@@AAVSnmpTarget@@Q6AXHPAV1@01PAX@ZPBX@Z ?cancel@Snmp@@UAEHK@Z ??1IpAddress@@UAE@XZ ??1Address@@UAE@XZ ?valid@Address@@UBEHXZ ??1SnmpTarget@@UAE@XZ

ws2_32

gethostbyname inet_ntoa WSAStartup WSACleanup WSAGetLastError

kernel32

GetStartupInfoA GetModuleHandleA SetEvent GetPrivateProfileStringA GetCommandLineA WaitForSingleObject CloseHandle CreateProcessA CreateEventA GetVersionExA SetEnvironmentVariableA GetCurrentDirectoryA ExpandEnvironmentStringsA GetLastError OpenEventA SetLastError

user32

CharNextA wsprintfA

advapi32

RegCreateKeyA RegSetValueExA RegCloseKey

msvcrt

_acmdln fopen __dllonexit _onexit _except_handler3 ?terminate@@YAXXZ _exit _mbsicmp vfprintf _strdate __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp memmove fclose _purecall _ismbcspace _mbscmp _mbstok ??3@YAXPAX@Z ??2@YAPAXI@Z __CxxFrameHandler _XcptFilter _access exit fflush _strtime

msvcp60

??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z ??0_Lockit@std@@QAE@XZ ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ ??1_Lockit@std@@QAE@XZ ?_Xran@std@@YAXXZ ?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ ?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z ?_Xlen@std@@YAXXZ ??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_c3aeadff5494797162cf2d0e1d4c0f17_elex_wannacry

hpzjsn01

ws2_32

kernel32

user32

advapi32

msvcrt

msvcp60

generic