2026-08-13_785b635d01f9d21b7c4a1eb4615a7aab_elex_remcos_wannacry

General

Target
2026-08-13_785b635d01f9d21b7c4a1eb4615a7aab_elex_remcos_wannacry
Size 84KB
Sample260813-zafjqsfl21
SHA256 6294efca8af0cb305efb77bba500eac3fdac22b6a471035034b89fb11c377c10
MD5 785b635d01f9d21b7c4a1eb4615a7aab
SHA1 d77a38e69797e1beab9e4a115646167247615f53
SHA512 06b1d78a4a9198237f2498086aaf090721e1f2be3307a2d12f701fcb4598222213fb7a55af85ab47f63988c451cde1321efcfec39e7dae541b0a7e104c6c9543
SSDEEP 768:rvw9816vhKQLroAo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oAoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1B6836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-13_785b635d01f9d21b7c4a1eb4615a7aab_elex_remcos_wannacry

SHA256 6294efca8af0cb305efb77bba500eac3fdac22b6a471035034b89fb11c377c10
MD5 785b635d01f9d21b7c4a1eb4615a7aab
SHA1 d77a38e69797e1beab9e4a115646167247615f53
SHA512 06b1d78a4a9198237f2498086aaf090721e1f2be3307a2d12f701fcb4598222213fb7a55af85ab47f63988c451cde1321efcfec39e7dae541b0a7e104c6c9543
SSDEEP 768:rvw9816vhKQLroAo4/QQF7PQcpFpZOgDaLSQTTyS1tl7lfqvocqcdxZV9:7EGh0oAoFM7PQcpMgDaLfnyS1loLDL
TLSH
T1B6836C03A684B5F2EB6C0135B19F0F7E963786B1C4C9682F5B638DB55862863F431E17
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

9844

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths