2026-08-15_26dff96cccb891c54f88e56faad91993_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_26dff96cccb891c54f88e56faad91993_elex_wannacry
Size 824KB
Sample260816-a6cehsap91
SHA256 e65cecee40e2b36f1f4ca13b781e12bb78deeff4106e07fa786c3f82ebd72fdf
MD5 26dff96cccb891c54f88e56faad91993
SHA1 48071867f99a0c60fdfcd477a0610663b3fafe71
SHA512 9ba34851b2ed02d4218b38df621b5d64bc005d58bdd7f1c85e5466e2fc6deb07f9cd00fddd38a0c32785affd38d40904119218927b6f20ebf49e69348e5dbf51
SSDEEP 6144:04sZBOZdjEYTPXMhaMP/kFTA7OA9BOZdjEYTPXMhaMP/a:0nANL8oq/kFTsOnNL8oq/a
TLSH
T18205FC3406718E04D863C3B42C950D955D6A1EF8CDF86795C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_26dff96cccb891c54f88e56faad91993_elex_wannacry

File Explorer

2026-08-15_26dff96cccb891c54f88e56faad91993_elex_wannacry

.exe 824KB

2026-08-15_26dff96cccb891c54f88e56faad91993_elex_wannacry

IMPHASH 5331ce77aa0d7f10da3e13b1a5022f58
SHA256 e65cecee40e2b36f1f4ca13b781e12bb78deeff4106e07fa786c3f82ebd72fdf
MD5 26dff96cccb891c54f88e56faad91993
SHA1 48071867f99a0c60fdfcd477a0610663b3fafe71
SHA512 9ba34851b2ed02d4218b38df621b5d64bc005d58bdd7f1c85e5466e2fc6deb07f9cd00fddd38a0c32785affd38d40904119218927b6f20ebf49e69348e5dbf51
SSDEEP 6144:04sZBOZdjEYTPXMhaMP/kFTA7OA9BOZdjEYTPXMhaMP/a:0nANL8oq/kFTsOnNL8oq/a
TLSH
T18205FC3406718E04D863C3B42C950D955D6A1EF8CDF86795C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

mfc42

ord5778 ord5465 ord3511 ord5194 ord268 ord350 ord533 ord938 ord833 ord919 ord3810 ord5934 ord2438 ord1644 ord6407 ord2584 ord3654 ord5572 ord5641 ord5592 ord1081 ord911 ord4187 ord698 ord415 ord396 ord715 ord539 ord542 ord6569 ord802 ord1997 ord1567 ord798 ord964 ord3663 ord3616 ord3127 ord5651 ord2919 ord6282 ord6283 ord6874 ord923 ord354 ord5186 ord665 ord5773 ord5442 ord6385 ord1979 ord3811 ord551 ord2915 ord940 ord823 ord922 ord926 ord924 ord2614 ord860 ord5683 ord4277 ord858 ord4129 ord941 ord4202 ord2764 ord2818 ord535 ord537 ord1105 ord800 ord825 ord540 ord861 ord4220

msvcrt

wcslen wcscmp _controlfp __set_app_type strtol __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ ?terminate@@YAXXZ strncpy time srand wcsstr _mbscmp _access atoi _mbsnbcpy rand _mbsicmp __CxxFrameHandler _CxxThrowException _except_handler3 __p__fmode

kernel32

LocalAlloc OutputDebugStringA CreateMutexA LocalFree GetSystemDirectoryA CreateSemaphoreA CopyFileA ReleaseSemaphore GetVersionExA SetFileAttributesA DeleteFileA ExitProcess GetLastError GetModuleHandleA CreateToolhelp32Snapshot Process32First OpenProcess GetPriorityClass Process32Next GetWindowsDirectoryA TerminateProcess Sleep GetModuleFileNameA SetEvent WaitForSingleObject CloseHandle CreateEventA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA FreeLibrary OpenEventA LockResource MultiByteToWideChar LoadLibraryExA EnumResourceNamesA EnumResourceLanguagesA FindResourceExA SizeofResource LoadResource GetStartupInfoA

user32

CreateMenu wsprintfA

advapi32

RegSetValueExA RegOpenKeyExA RegDeleteValueA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize CoTaskMemFree CoInitialize CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_26dff96cccb891c54f88e56faad91993_elex_wannacry

psapi

version

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

generic