2026-08-05_5a849aeed894361702246300b4313d01_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_5a849aeed894361702246300b4313d01_elex_wannacry
Size 824KB
Sample260805-graeyaee74
SHA256 9a447b532bb6291b04d606be5f139322defb321a51293c52ea0ef69786a5c102
MD5 5a849aeed894361702246300b4313d01
SHA1 76822c6e160d75be24a4b89b17daebdde79ef43e
SHA512 0e08731b6588227cec826890a7649bfd5c601fa517016664cb894c33f88efbbc3277572290c7398946c8a1e796096e2872de9c8c9bb082834238460f7b71134e
SSDEEP 6144:U4sZBOZdjEYTPXMhaMP/kFTA7OAtBOZdjEYTPXMhaMP/a:UnANL8oq/kFTsOTNL8oq/a
TLSH
T15405FC3406718E04D863C3B42C950D955D6A1EF8CDF86795C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_5a849aeed894361702246300b4313d01_elex_wannacry

File Explorer

2026-08-05_5a849aeed894361702246300b4313d01_elex_wannacry

.exe 824KB

2026-08-05_5a849aeed894361702246300b4313d01_elex_wannacry

IMPHASH 5331ce77aa0d7f10da3e13b1a5022f58
SHA256 9a447b532bb6291b04d606be5f139322defb321a51293c52ea0ef69786a5c102
MD5 5a849aeed894361702246300b4313d01
SHA1 76822c6e160d75be24a4b89b17daebdde79ef43e
SHA512 0e08731b6588227cec826890a7649bfd5c601fa517016664cb894c33f88efbbc3277572290c7398946c8a1e796096e2872de9c8c9bb082834238460f7b71134e
SSDEEP 6144:U4sZBOZdjEYTPXMhaMP/kFTA7OAtBOZdjEYTPXMhaMP/a:UnANL8oq/kFTsOTNL8oq/a
TLSH
T15405FC3406718E04D863C3B42C950D955D6A1EF8CDF86795C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

mfc42

ord5778 ord5465 ord3511 ord5194 ord268 ord350 ord533 ord938 ord833 ord919 ord3810 ord5934 ord2438 ord1644 ord6407 ord2584 ord3654 ord5572 ord5641 ord5592 ord1081 ord911 ord4187 ord698 ord415 ord396 ord715 ord539 ord542 ord6569 ord802 ord1997 ord1567 ord798 ord964 ord3663 ord3616 ord3127 ord5651 ord2919 ord6282 ord6283 ord6874 ord923 ord354 ord5186 ord665 ord5773 ord5442 ord6385 ord1979 ord3811 ord551 ord2915 ord940 ord823 ord922 ord926 ord924 ord2614 ord860 ord5683 ord4277 ord858 ord4129 ord941 ord4202 ord2764 ord2818 ord535 ord537 ord1105 ord800 ord825 ord540 ord861 ord4220

msvcrt

wcslen wcscmp _controlfp __set_app_type strtol __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ ?terminate@@YAXXZ strncpy time srand wcsstr _mbscmp _access atoi _mbsnbcpy rand _mbsicmp __CxxFrameHandler _CxxThrowException _except_handler3 __p__fmode

kernel32

LocalAlloc OutputDebugStringA CreateMutexA LocalFree GetSystemDirectoryA CreateSemaphoreA CopyFileA ReleaseSemaphore GetVersionExA SetFileAttributesA DeleteFileA ExitProcess GetLastError GetModuleHandleA CreateToolhelp32Snapshot Process32First OpenProcess GetPriorityClass Process32Next GetWindowsDirectoryA TerminateProcess Sleep GetModuleFileNameA SetEvent WaitForSingleObject CloseHandle CreateEventA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA FreeLibrary OpenEventA LockResource MultiByteToWideChar LoadLibraryExA EnumResourceNamesA EnumResourceLanguagesA FindResourceExA SizeofResource LoadResource GetStartupInfoA

user32

CreateMenu wsprintfA

advapi32

RegSetValueExA RegOpenKeyExA RegDeleteValueA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize CoTaskMemFree CoInitialize CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_5a849aeed894361702246300b4313d01_elex_wannacry

psapi

version

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

generic