2026-08-01_f73adec0f4100f9416b942babc01a889_elex_wannacry

General

Target
2026-08-01_f73adec0f4100f9416b942babc01a889_elex_wannacry
Size 18KB
Sample260801-pkrdwavekc
SHA256 13c959e3476163c326c3faced8a417cc6168b58c39a10048eefaac0b4eca5f51
MD5 f73adec0f4100f9416b942babc01a889
SHA1 6233180067666663e3cdf07478f181af0b206a26
SHA512 5d5612cc99a0b9c710eb93e2885a47b30abf58366fa030f09728a42a2640595988aac99b625e949cae9ab2fa9dcab1b91a358a76cade9e1f54a99b6a46ed51f0
SSDEEP 384:4+5EhSezD5ZBYv69Vhd/xXFgSr/zTG6kotKTXrX:n+70AhdZF9TzZkFXr
TLSH
T1E882D74333E194A3D5EE0576592B9B6A8FB8BC251421EE3B9AA47D4F2C30305DD3932D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Detected Nirsoft tools 1 IoCs

Free utilities often used by attackers which can steal passwords, product keys, etc.

resource	yara_rule
sample	Nirsoft

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_f73adec0f4100f9416b942babc01a889_elex_wannacry

SHA256 13c959e3476163c326c3faced8a417cc6168b58c39a10048eefaac0b4eca5f51
MD5 f73adec0f4100f9416b942babc01a889
SHA1 6233180067666663e3cdf07478f181af0b206a26
SHA512 5d5612cc99a0b9c710eb93e2885a47b30abf58366fa030f09728a42a2640595988aac99b625e949cae9ab2fa9dcab1b91a358a76cade9e1f54a99b6a46ed51f0
SSDEEP 384:4+5EhSezD5ZBYv69Vhd/xXFgSr/zTG6kotKTXrX:n+70AhdZF9TzZkFXr
TLSH
T1E882D74333E194A3D5EE0576592B9B6A8FB8BC251421EE3B9AA47D4F2C30305DD3932D
MD5 SHA1 SHA512 SSDEEP TLSH

Detected Nirsoft tools

Free utilities often used by attackers which can steal passwords, product keys, etc.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths