2026-08-10_0532116790bb28596dacb9c5d98ddd46_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_0532116790bb28596dacb9c5d98ddd46_elex_wannacry
Size 2.9MB
Sample260810-m1ph4sssdt
SHA256 4e73613aee889a07c088819fd11533d35f87b58dc83cff61fa0c863635eacf8f
MD5 0532116790bb28596dacb9c5d98ddd46
SHA1 4a4b5657e875c9d26b8bd140230c03168355cd81
SHA512 ccacc2d8326b87f910ccafe8b4373bd3189abe5d02b90923397a7616a0486a0d1804ba2c0e7abaaaa0ed9cbbc1dcb41ba6a5f559f8c1bcfcd3086fe44bd86e1f
SSDEEP 49152:McTPgxStCFO8zh5Rf2t6Gy55bLtrds4k7aqly4eMPkC5VhwPVkV+AYVuqtxJIfk:qkMFrh5R+tChO7aqly4eIkCrhY4+Zuq9
TLSH
T14CD53331F182C429EDA0183A98F91BAB697E76531B9544CBB38CCE4D14FB0C67B7225D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_0532116790bb28596dacb9c5d98ddd46_elex_wannacry

File Explorer

2026-08-10_0532116790bb28596dacb9c5d98ddd46_elex_wannacry

.exe 2.9MB

2026-08-10_0532116790bb28596dacb9c5d98ddd46_elex_wannacry

IMPHASH 0e5139ca0774d89af0186c0637af3d33
SHA256 4e73613aee889a07c088819fd11533d35f87b58dc83cff61fa0c863635eacf8f
MD5 0532116790bb28596dacb9c5d98ddd46
SHA1 4a4b5657e875c9d26b8bd140230c03168355cd81
SHA512 ccacc2d8326b87f910ccafe8b4373bd3189abe5d02b90923397a7616a0486a0d1804ba2c0e7abaaaa0ed9cbbc1dcb41ba6a5f559f8c1bcfcd3086fe44bd86e1f
SSDEEP 49152:McTPgxStCFO8zh5Rf2t6Gy55bLtrds4k7aqly4eMPkC5VhwPVkV+AYVuqtxJIfk:qkMFrh5R+tChO7aqly4eIkCrhY4+Zuq9
TLSH
T14CD53331F182C429EDA0183A98F91BAB697E76531B9544CBB38CCE4D14FB0C67B7225D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

68710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

gethostbyname gethostname WSAStartup recv WSAGetLastError send getsockname getpeername accept listen inet_addr connect htons htonl bind shutdown closesocket socket setsockopt inet_ntoa

wtsapi32

WTSEnumerateProcessesA WTSFreeMemory

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

crypt32

CertCloseStore CertFreeCertificateContext

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

mfc42

ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4627 ord4465 ord3597 ord800 ord641 ord860 ord540 ord324 ord2370 ord4234 ord825 ord823 ord4673 ord4274 ord6375 ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord4622 ord4424 ord3738 ord561 ord815 ord668 ord1980 ord2770 ord356 ord2621 ord1134 ord3337 ord3259 ord3147 ord2982 ord5277 ord2124 ord2446 ord5261 ord1727 ord5065 ord3749 ord6376 ord2055 ord2648 ord4441 ord4837 ord3798 ord5280 ord4353 ord6374 ord5163 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord2514 ord4710 ord4998 ord4853 ord4376 ord5265 ord1576 ord4425 ord1168 ord2301

msvcrt

_exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _controlfp __dllonexit _local_unwind2 __p___argc __p___argv _snprintf atol _stricmp fseek ftell fread memcmp time srand rand sprintf _except_handler3 malloc free isdigit strtoul strcmp vsprintf fopen fputs fclose strlen strncpy strcpy _strlwr strcat memcpy memset _purecall __CxxFrameHandler _setmbcp _onexit

kernel32

GetVersion GetTickCount Sleep GetWindowsDirectoryA CreateDirectoryA GetProcessHeap HeapAlloc HeapFree CreateMutexA WritePrivateProfileStringA GetModuleFileNameA GetProcAddress LoadLibraryA GetCurrentProcess GetModuleHandleA CloseHandle CreateProcessA GetStartupInfoA GetLastError Process32Next Process32First CreateToolhelp32Snapshot TerminateProcess OpenProcess WaitForSingleObject SetFileTime SystemTimeToFileTime CreateFileA WriteFile MoveFileExA DeleteFileA GetSystemDirectoryA GetCurrentProcessId SetLastError GetVersionExA LocalFree FormatMessageA CopyFileA lstrcatA lstrcpyA MultiByteToWideChar GetPrivateProfileStringA

user32

wsprintfA MessageBoxA EnableWindow

winspool.drv

GetPrinterA OpenPrinterA ClosePrinter XcvDataW AddPrinterDriverExA GetPrinterDriverDirectoryA AddPrinterA DeletePrinter DeletePrinterDriverA DeletePortA

advapi32

SetTokenInformation RegQueryValueExA RegOpenKeyExA DeleteService CreateServiceA EnumDependentServicesA ControlService StartServiceA QueryServiceStatus CloseServiceHandle OpenSCManagerA OpenServiceA CreateProcessAsUserA DuplicateTokenEx RegSetValueExA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegCreateKeyExA RegCloseKey

ole32

CoInitialize CoCreateInstance CoUninitialize

Name

.text

Size

144KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

28KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_0532116790bb28596dacb9c5d98ddd46_elex_wannacry

ws2_32

wtsapi32

userenv

crypt32

version

mfc42

msvcrt

kernel32

user32

winspool.drv

advapi32

ole32

generic