2026-08-15_5346b9d1c246a35372a2d896720e971a_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_5346b9d1c246a35372a2d896720e971a_elex_wannacry
Size 25KB
Sample260815-rm516ayvhs
SHA256 2f71234f4c89f93a2d3d20b5e28d28f616c9029249f3775227de55afe3e047a8
MD5 5346b9d1c246a35372a2d896720e971a
SHA1 7f2f3b90407984c1940177017cc0995c2a5ba950
SHA512 70036ff31b9058f041263147069cad888c13def4e56a1c3db5d06e11c358fcbc1e4c34e520998cd50b4280e2426e088e6b43567cd73464234b76e5bc560a152b
SSDEEP 384:UfdBB0xwrhprR1iBQix1xhCxRWmBMPqT5Gb8YGaLCtevpc3SUO8EbTnQC9okD3Ka:UGmKq1kjWSUbuQChMSyzHLeRoi7szpO
TLSH
T1DAB23B4365CE40A3E62961300AAB4336E2B7B0E7231473DBFA70EDF51E62651F87525B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_5346b9d1c246a35372a2d896720e971a_elex_wannacry

File Explorer

2026-08-15_5346b9d1c246a35372a2d896720e971a_elex_wannacry

.exe 25KB

2026-08-15_5346b9d1c246a35372a2d896720e971a_elex_wannacry

IMPHASH 256378b620a1391048c889acd08fc55b
SHA256 2f71234f4c89f93a2d3d20b5e28d28f616c9029249f3775227de55afe3e047a8
MD5 5346b9d1c246a35372a2d896720e971a
SHA1 7f2f3b90407984c1940177017cc0995c2a5ba950
SHA512 70036ff31b9058f041263147069cad888c13def4e56a1c3db5d06e11c358fcbc1e4c34e520998cd50b4280e2426e088e6b43567cd73464234b76e5bc560a152b
SSDEEP 384:UfdBB0xwrhprR1iBQix1xhCxRWmBMPqT5Gb8YGaLCtevpc3SUO8EbTnQC9okD3Ka:UGmKq1kjWSUbuQChMSyzHLeRoi7szpO
TLSH
T1DAB23B4365CE40A3E62961300AAB4336E2B7B0E7231473DBFA70EDF51E62651F87525B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateProcessA SetFileAttributesA CopyFileA Sleep CloseHandle GetFileSize CreateFileA GetWindowsDirectoryA GetCommandLineA GetLocalTime GetSystemDirectoryA GetShortPathNameA WriteFile DeleteFileA GetExitCodeProcess CreateMutexA SetFilePointer ReadFile FindClose FindNextFileA FindFirstFileA PeekNamedPipe GetStartupInfoA CreatePipe GetModuleHandleA GetLastError GetLogicalDriveStringsA WaitForSingleObject GetDriveTypeA

user32

DispatchMessageA TranslateMessage TranslateAcceleratorA GetMessageA LoadAcceleratorsA PostQuitMessage BeginPaint EndPaint DefWindowProcA wsprintfA DestroyWindow CreateWindowExA LoadIconA LoadCursorA RegisterClassExA LoadStringA

advapi32

RegCloseKey RegOpenKeyExA RegSetValueExA

shell32

ShellExecuteA

msvcrt

memmove _endthread ??2@YAPAXI@Z _CxxThrowException exit rename fclose fwrite fseek fopen fread __dllonexit _onexit ??1type_info@@UAE@XZ _exit _XcptFilter _acmdln __getmainargs _initterm __CxxFrameHandler _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _beginthread ??3@YAXPAX@Z memchr __setusermatherr

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?_Xran@std@@YAXXZ ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?_Xlen@std@@YAXXZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

ws2_32

htons inet_addr socket inet_ntoa gethostbyname WSAStartup closesocket send recv connect

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_5346b9d1c246a35372a2d896720e971a_elex_wannacry

kernel32

user32

advapi32

shell32

msvcrt

msvcp60

ws2_32

generic