2026-07-31_bb7e2dee53a4bc17ce47dcf91a32a8d8_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_bb7e2dee53a4bc17ce47dcf91a32a8d8_elex_wannacry
Size 7.3MB
Sample260731-m9qsja1fpg
SHA256 56d043a791def60f7f619ca93a1efc03419e1dd71e3c8b97decebcc1ad89f90f
MD5 bb7e2dee53a4bc17ce47dcf91a32a8d8
SHA1 c97885f4a6f802bc93498fb9ad86a4df8647f7f6
SHA512 51175e7becd6c992b0187575c072639b7c3189f973735fd2900c9cf83218dfedabd267cc4b6b52f28884a0b791b455e7d137e6dbc9e05ab4d59a803f124507e0
SSDEEP 196608:o0DiBKen57LpFX0ljoUkmGl/2jfXzSuerc6m7L:oBT77E6mqkmuerP+
TLSH
T1D476339C73049F22F13D8970CAF19703CC9E41351E2239937782A7F1A65BFD29A95AD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-07-31_bb7e2dee53a4bc17ce47dcf91a32a8d8_elex_wannacry

File Explorer

2026-07-31_bb7e2dee53a4bc17ce47dcf91a32a8d8_elex_wannacry

.exe 7.3MB

2026-07-31_bb7e2dee53a4bc17ce47dcf91a32a8d8_elex_wannacry

IMPHASH d221b1dc8c3a08622f6512e7876527c8
SHA256 56d043a791def60f7f619ca93a1efc03419e1dd71e3c8b97decebcc1ad89f90f
MD5 bb7e2dee53a4bc17ce47dcf91a32a8d8
SHA1 c97885f4a6f802bc93498fb9ad86a4df8647f7f6
SHA512 51175e7becd6c992b0187575c072639b7c3189f973735fd2900c9cf83218dfedabd267cc4b6b52f28884a0b791b455e7d137e6dbc9e05ab4d59a803f124507e0
SSDEEP 196608:o0DiBKen57LpFX0ljoUkmGl/2jfXzSuerc6m7L:oBT77E6mqkmuerP+
TLSH
T1D476339C73049F22F13D8970CAF19703CC9E41351E2239937782A7F1A65BFD29A95AD8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

c8:db:0e:26:db:89:fc:6b:a5:4a:62:4b:48:f5:88:70:c3:ff:81:44:c6:cc:6f:f9:2b:9c:69:31:46:51:9f:e8

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=91440300MA5G8WDP9F,CN=Shenzhen Xianguanjia Technology Co.\, Ltd.,O=Shenzhen Xianguanjia Technology Co.\, Ltd.,STREET=南山区西丽街道曙光社区沙河西路铁路旁之二丰泽园2栋302,L=Shenzhen,ST=Guangdong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085368656e7a68656e,1.3.6.1.4.1.311.60.2.1.2=#13094775616e67646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 20, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

3c:7b:1b:9b:74:5d:63:c6:bd:ba:4b:e3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 18, 2025 - Aug 23, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

7456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

2026-07-31_bb7e2dee53a4bc17ce47dcf91a32a8d8_elex_wannacry

PE Signature issue

kernel32

user32

msvcrt

generic