2026-08-02_af043a447b9398b1c3ef178663166543_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_af043a447b9398b1c3ef178663166543_elex_wannacry
Size 532KB
Sample260802-c8mpdasfmc
SHA256 92abe5ebdced1bb0fa3bb3e807362293b17fa49867baa643d207c52227dd1206
MD5 af043a447b9398b1c3ef178663166543
SHA1 e2cdd652e8821058edfd0722d6d5e129f62e310d
SHA512 5b81889723a3e36b69aa5d72042f568e4271a73dc9c4199a0ce4f5ee05252fd918a78e92165322abbdc38830d6f04a6a8f8ca3c126bc6bef2d967ea1b4b3564b
SSDEEP 3072:594sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQyg:j4sZBOZdjEYTPXMhaMP/kFTA7OAO
TLSH
T130C41C3406B18E04D463C3B42C950D955D691EF8CDF86796C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_af043a447b9398b1c3ef178663166543_elex_wannacry

File Explorer

2026-08-02_af043a447b9398b1c3ef178663166543_elex_wannacry

.exe 532KB

2026-08-02_af043a447b9398b1c3ef178663166543_elex_wannacry

IMPHASH 5331ce77aa0d7f10da3e13b1a5022f58
SHA256 92abe5ebdced1bb0fa3bb3e807362293b17fa49867baa643d207c52227dd1206
MD5 af043a447b9398b1c3ef178663166543
SHA1 e2cdd652e8821058edfd0722d6d5e129f62e310d
SHA512 5b81889723a3e36b69aa5d72042f568e4271a73dc9c4199a0ce4f5ee05252fd918a78e92165322abbdc38830d6f04a6a8f8ca3c126bc6bef2d967ea1b4b3564b
SSDEEP 3072:594sjiJeBjaoadjE5aTtEyXM5hkftw39t+unk++T3mNNb5NOV8aOQyg:j4sZBOZdjEYTPXMhaMP/kFTA7OAO
TLSH
T130C41C3406B18E04D463C3B42C950D955D691EF8CDF86796C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

mfc42

ord5778 ord5465 ord3511 ord5194 ord268 ord350 ord533 ord938 ord833 ord919 ord3810 ord5934 ord2438 ord1644 ord6407 ord2584 ord3654 ord5572 ord5641 ord5592 ord1081 ord911 ord4187 ord698 ord415 ord396 ord715 ord539 ord542 ord6569 ord802 ord1997 ord1567 ord798 ord964 ord3663 ord3616 ord3127 ord5651 ord2919 ord6282 ord6283 ord6874 ord923 ord354 ord5186 ord665 ord5773 ord5442 ord6385 ord1979 ord3811 ord551 ord2915 ord940 ord823 ord922 ord926 ord924 ord2614 ord860 ord5683 ord4277 ord858 ord4129 ord941 ord4202 ord2764 ord2818 ord535 ord537 ord1105 ord800 ord825 ord540 ord861 ord4220

msvcrt

wcslen wcscmp _controlfp __set_app_type strtol __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ ?terminate@@YAXXZ strncpy time srand wcsstr _mbscmp _access atoi _mbsnbcpy rand _mbsicmp __CxxFrameHandler _CxxThrowException _except_handler3 __p__fmode

kernel32

LocalAlloc OutputDebugStringA CreateMutexA LocalFree GetSystemDirectoryA CreateSemaphoreA CopyFileA ReleaseSemaphore GetVersionExA SetFileAttributesA DeleteFileA ExitProcess GetLastError GetModuleHandleA CreateToolhelp32Snapshot Process32First OpenProcess GetPriorityClass Process32Next GetWindowsDirectoryA TerminateProcess Sleep GetModuleFileNameA SetEvent WaitForSingleObject CloseHandle CreateEventA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA FreeLibrary OpenEventA LockResource MultiByteToWideChar LoadLibraryExA EnumResourceNamesA EnumResourceLanguagesA FindResourceExA SizeofResource LoadResource GetStartupInfoA

user32

CreateMenu wsprintfA

advapi32

RegSetValueExA RegOpenKeyExA RegDeleteValueA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize CoTaskMemFree CoInitialize CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_af043a447b9398b1c3ef178663166543_elex_wannacry

psapi

version

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

generic