2026-08-14_4de9a58c868257e636390b4a75ea9a82_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_4de9a58c868257e636390b4a75ea9a82_elex_wannacry
Size 524KB
Sample260814-e4xpwsvve1
SHA256 ef82bb790a805877c0fc820bcafd18be61685ce84321eded81b232acf28916d0
MD5 4de9a58c868257e636390b4a75ea9a82
SHA1 c951ef5a3a7c7cb40a279f232de2323139b935d3
SHA512 de5971f43353a982cfe3c1cbfd195d937bf740fcf56622bd005fad0ee468e864694ae37e67fee1d6892f453a15ec3e13330847dd7f71f2e0b24aa9bc84196a9e
SSDEEP 12288:VIhRHJcx4+nKTGrBOoFoZDLeLgcLwAVbb2BsCfe6IwAulqi:VIhRHKfCGsZDCc2b2J26LlF
TLSH
T170B423A59790186AF6BB7D350C672737E37FA2858500154F1BE4DE7EC0B36D2C02A78A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_4de9a58c868257e636390b4a75ea9a82_elex_wannacry

File Explorer

2026-08-14_4de9a58c868257e636390b4a75ea9a82_elex_wannacry

.exe 524KB

2026-08-14_4de9a58c868257e636390b4a75ea9a82_elex_wannacry

IMPHASH cfb373e3071730a3a5a9b37af5002099
SHA256 ef82bb790a805877c0fc820bcafd18be61685ce84321eded81b232acf28916d0
MD5 4de9a58c868257e636390b4a75ea9a82
SHA1 c951ef5a3a7c7cb40a279f232de2323139b935d3
SHA512 de5971f43353a982cfe3c1cbfd195d937bf740fcf56622bd005fad0ee468e864694ae37e67fee1d6892f453a15ec3e13330847dd7f71f2e0b24aa9bc84196a9e
SSDEEP 12288:VIhRHJcx4+nKTGrBOoFoZDLeLgcLwAVbb2BsCfe6IwAulqi:VIhRHKfCGsZDCc2b2J26LlF
TLSH
T170B423A59790186AF6BB7D350C672737E37FA2858500154F1BE4DE7EC0B36D2C02A78A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23889

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord825

msvcrt

_controlfp _exit _except_handler3 __set_app_type __p__fmode __p__commode fwrite _filelength _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter fopen strncmp _snprintf fprintf realloc strstr _access _strnicmp fseek fread fflush strrchr malloc free time srand rand sprintf atoi __CxxFrameHandler fclose ??1type_info@@UAE@XZ _CxxThrowException

kernel32

CreateThread CreateFileA ExitProcess GlobalMemoryStatus GetWindowsDirectoryA LocalFree WaitForMultipleObjects CreateMutexA GetLastError CopyFileA CreateProcessA GetFileAttributesA GetComputerNameA GetSystemDirectoryA GetFileTime SetFileTime GetModuleFileNameA GetShortPathNameA GetTempPathA WinExec OpenProcess GetCurrentProcess DuplicateHandle FreeLibrary LoadLibraryA GetTickCount Sleep CloseHandle GetDiskFreeSpaceExA lstrcpyA GetVolumeInformationA GetDriveTypeA FindClose FindNextFileA lstrcmpA lstrlenA FindFirstFileA lstrcatA GetFileAttributesExA GetProcAddress GetModuleHandleA GetStartupInfoA DeleteFileA InterlockedDecrement InterlockedIncrement GetEnvironmentVariableA WaitForSingleObject GetVersionExA TerminateProcess WriteFile ReadFile

user32

wsprintfA

advapi32

LookupPrivilegeValueA RegCreateKeyExA RegSetValueExA OpenProcessToken GetUserNameW AdjustTokenPrivileges RegOpenKeyExA RegEnumKeyExA RegCloseKey RegQueryValueExA

ws2_32

WSACleanup shutdown connect bind setsockopt WSAIoctl closesocket socket gethostname select __WSAFDIsSet send recv gethostbyname htons WSAStartup ioctlsocket

netapi32

NetUserGetInfo NetApiBufferFree

oleaut32

GetErrorInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_4de9a58c868257e636390b4a75ea9a82_elex_wannacry

mfc42

msvcrt

kernel32

user32

advapi32

ws2_32

netapi32

oleaut32

generic