2026-08-08_43e66905e63c418fede72131c5b05bc0_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_43e66905e63c418fede72131c5b05bc0_elex_wannacry
Size 44KB
Sample260808-n2p2psep61
SHA256 f5fa06f3d581e839d6b1bbc0b154cbfd1208ab29489ededbc2d1757c9a02aa79
MD5 43e66905e63c418fede72131c5b05bc0
SHA1 91e33c1526ae668029e2181ca3e3aeab3a428b9d
SHA512 cc59e829c3e5880a0ada1abfd1bf38d36f513485781f679f95ee915e841618fc651b5af90467b533e8fd98e4089c38504fb109ea9f61a0421961a7ad99bc3964
SSDEEP 768:9kvGJLQP8kW3aNcPG4Pasv/dITgws+OYyD2R:9keGUkW3aNcP42/dITgwsB32R
TLSH
T121135D67229398E0C91D56B005D677BAA53F95922F10A3E7DF65EC6ECD33D0CC831948
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_43e66905e63c418fede72131c5b05bc0_elex_wannacry

File Explorer

2026-08-08_43e66905e63c418fede72131c5b05bc0_elex_wannacry

.exe 44KB

2026-08-08_43e66905e63c418fede72131c5b05bc0_elex_wannacry

IMPHASH f5441b33c83f4b4b4d905e4509b2cf67
SHA256 f5fa06f3d581e839d6b1bbc0b154cbfd1208ab29489ededbc2d1757c9a02aa79
MD5 43e66905e63c418fede72131c5b05bc0
SHA1 91e33c1526ae668029e2181ca3e3aeab3a428b9d
SHA512 cc59e829c3e5880a0ada1abfd1bf38d36f513485781f679f95ee915e841618fc651b5af90467b533e8fd98e4089c38504fb109ea9f61a0421961a7ad99bc3964
SSDEEP 768:9kvGJLQP8kW3aNcPG4Pasv/dITgws+OYyD2R:9keGUkW3aNcP42/dITgwsB32R
TLSH
T121135D67229398E0C91D56B005D677BAA53F95922F10A3E7DF65EC6ECD33D0CC831948
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16559

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord3830 ord561 ord2621 ord1134 ord3811 ord823 ord1576 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord3259 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5199 ord1168 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4673 ord540 ord537 ord1228 ord800 ord665 ord825 ord815 ord354

msvcrt

_ltoa strstr strchr memmove atol _access __dllonexit _onexit _exit _XcptFilter exit _controlfp _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type __CxxFrameHandler sprintf _setmbcp _except_handler3

kernel32

FlushViewOfFile GetTempFileNameA FlushFileBuffers GetDiskFreeSpaceExA OpenFileMappingA FindFirstFileA CreateProcessA DeleteFileA GetTempPathA GetModuleHandleA GetStartupInfoA RemoveDirectoryA Sleep GetFileSize SetFileAttributesA GetCompressedFileSizeA GetCurrentDirectoryA CopyFileA CloseHandle GetLastError CreateEventA WaitForSingleObject GetVolumeInformationA OpenMutexA

gdi32

GetTextCharsetInfo

advapi32

RegCloseKey RegSetValueExA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegNotifyChangeKeyValue RegSetKeySecurity RegQueryValueExA RegCreateKeyA

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Xran@std@@YAXXZ ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_Xlen@std@@YAXXZ ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

wininet

HttpQueryInfoA HttpSendRequestA HttpOpenRequestA InternetConnectA InternetOpenA DeleteUrlCacheEntry InternetCrackUrlA InternetCloseHandle InternetReadFile InternetSetFilePointer

ws2_32

gethostbyname

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_43e66905e63c418fede72131c5b05bc0_elex_wannacry

mfc42

msvcrt

kernel32

gdi32

advapi32

msvcp60

wininet

ws2_32

generic