2026-08-09_16121b5b8fa91e5eeb4f3a504fdf9095_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_16121b5b8fa91e5eeb4f3a504fdf9095_elex_wannacry
Size 55KB
Sample260809-es4daszfjd
SHA256 87c16687cc013b2dd55740de1a842aa6adfe4dfc34b06b1026e9cece4692ec7a
MD5 16121b5b8fa91e5eeb4f3a504fdf9095
SHA1 5a4cb6323fd71b6ab0e0d7c67cbfbee032756464
SHA512 04a7aa39e312828c7d03a578523eb5d7851f2b26280b40be5d1e542fcadd7821cad652893a9258a3826e7a7ee37b14322d4e4229427e4ad34e9dfb5d09f7a864
SSDEEP 1536:LNxU+W+73uSpoo3e/8+dcr2ySHCT89uuud7bOCx:PU+W+qNo3e9Sy/H4t
TLSH
T1FA439D515BA6807FFD705AF42C8752FE81161D2B214BED1AE524FD2188AA1E3FCF9213
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_16121b5b8fa91e5eeb4f3a504fdf9095_elex_wannacry

File Explorer

2026-08-09_16121b5b8fa91e5eeb4f3a504fdf9095_elex_wannacry

.exe 55KB

2026-08-09_16121b5b8fa91e5eeb4f3a504fdf9095_elex_wannacry

IMPHASH 5afda5bec5ddd3ba31023406f0fca220
SHA256 87c16687cc013b2dd55740de1a842aa6adfe4dfc34b06b1026e9cece4692ec7a
MD5 16121b5b8fa91e5eeb4f3a504fdf9095
SHA1 5a4cb6323fd71b6ab0e0d7c67cbfbee032756464
SHA512 04a7aa39e312828c7d03a578523eb5d7851f2b26280b40be5d1e542fcadd7821cad652893a9258a3826e7a7ee37b14322d4e4229427e4ad34e9dfb5d09f7a864
SSDEEP 1536:LNxU+W+73uSpoo3e/8+dcr2ySHCT89uuud7bOCx:PU+W+qNo3e9Sy/H4t
TLSH
T1FA439D515BA6807FFD705AF42C8752FE81161D2B214BED1AE524FD2188AA1E3FCF9213
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42031

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EnumWindows GetWindowTextA GetWindowThreadProcessId CharUpperA MessageBoxA GetWindowTextLengthA

shell32

ShellExecuteA

dbghelp

MakeSureDirectoryPathExists

urlmon

URLDownloadToFileA

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit fwrite srand rand strstr _splitpath atoi tolower fopen fclose strchr sprintf _strlwr _strrev _strupr

wininet

InternetGetConnectedState

wsock32

connect gethostbyname recv shutdown closesocket WSACleanup htons socket WSAStartup __WSAFDIsSet select WSAGetLastError inet_ntoa send

advapi32

RegCreateKeyA AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA GetUserNameA RegCloseKey LookupPrivilegeValueA OpenProcessToken RegSetValueExA

kernel32

WinExec GetCurrentThread SetThreadPriority ExitThread CreateThread Sleep GetVersionExA GetComputerNameA FreeLibrary LoadLibraryA GetProcAddress GetModuleFileNameA GetSystemDirectoryA GetWindowsDirectoryA GetTempPathA CreateSemaphoreA ReleaseSemaphore CreateEventA ExitProcess CreateMutexA GetLastError lstrlenA GetTickCount lstrcpyA GetCurrentProcess GetModuleHandleA GetCurrentProcessId CreateToolhelp32Snapshot Process32First OpenProcess TerminateProcess Process32Next GetSystemTime CreateProcessA WritePrivateProfileStringA CreateDirectoryA CreateFileA CloseHandle GlobalFree GlobalAlloc GetStartupInfoA SetFileAttributesA CopyFileA ReleaseMutex GetDriveTypeA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_16121b5b8fa91e5eeb4f3a504fdf9095_elex_wannacry

user32

shell32

dbghelp

urlmon

msvcrt

wininet

wsock32

advapi32

kernel32

generic