2026-08-16_4db8dce75a0eb7d4744ee20d4254f7e9_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_4db8dce75a0eb7d4744ee20d4254f7e9_elex_wannacry
Size 2.6MB
Sample260816-wpbmjstyg1
SHA256 56565fd996c05fd48689d4597b564f592ae7b97b1728c0d65615dc363ce1a5de
MD5 4db8dce75a0eb7d4744ee20d4254f7e9
SHA1 bddbc256a99c6a301ee2db23279ed52ec8afc6f6
SHA512 08504fb9a82b44c05e8b5ae3bca8d9c742c9643ee54a5272fa27030f35654ad9fcb101c2e3732f4728bdd3b7f7e30a25c8b47f907d8d558cb478e0e9575ce453
SSDEEP 24576:WS/Ya7Taz/Zu+1/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:ozR5LNiXicJFFRGNzj3
TLSH
T115D5E181E58185B2EE61403645A65B76CA70DD593F339AA3E394FE39AC33321EF1530E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_4db8dce75a0eb7d4744ee20d4254f7e9_elex_wannacry

File Explorer

2026-08-16_4db8dce75a0eb7d4744ee20d4254f7e9_elex_wannacry

.exe 2.6MB

2026-08-16_4db8dce75a0eb7d4744ee20d4254f7e9_elex_wannacry

IMPHASH ec657180179f58788b56175e67052928
SHA256 56565fd996c05fd48689d4597b564f592ae7b97b1728c0d65615dc363ce1a5de
MD5 4db8dce75a0eb7d4744ee20d4254f7e9
SHA1 bddbc256a99c6a301ee2db23279ed52ec8afc6f6
SHA512 08504fb9a82b44c05e8b5ae3bca8d9c742c9643ee54a5272fa27030f35654ad9fcb101c2e3732f4728bdd3b7f7e30a25c8b47f907d8d558cb478e0e9575ce453
SSDEEP 24576:WS/Ya7Taz/Zu+1/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:ozR5LNiXicJFFRGNzj3
TLSH
T115D5E181E58185B2EE61403645A65B76CA70DD593F339AA3E394FE39AC33321EF1530E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

190550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileMappingA GetProcAddress GetLocalTime GetFileInformationByHandle MapViewOfFile GetLastError OpenFile UnmapViewOfFile SetThreadPriority GetCurrentThread LoadLibraryA GetCurrentProcess CreateProcessA GetStartupInfoA ReleaseSemaphore FreeLibrary ExitProcess GetVersionExA ReadFile WriteFile CopyFileA CreateEventA VirtualFree FindFirstFileA OpenEventA ResetEvent SetEvent WaitForSingleObject Sleep OpenMutexA ReleaseMutex FindClose FindNextFileA SetFilePointer CreateSemaphoreA OpenSemaphoreA DeleteFileA CreateFileA GetModuleHandleA WaitNamedPipeA GetFileSize CloseHandle OpenFileMappingA VirtualAlloc CreateMutexA GetTickCount

user32

GetDC LoadCursorA WaitForInputIdle MessageBoxA GetMessageA RegisterClassA LoadIconA CreateWindowExA UpdateWindow ShowWindow ReleaseDC DefFrameProcA DestroyWindow SetWindowTextA PostMessageA FindWindowA DispatchMessageA TranslateMessage

gdi32

TextOutA

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

msvcrt

strtol strchr toupper strncmp memmove free strtoul fclose fputs fgets fopen sprintf fread atoi fwrite strtok modf _ftol sscanf printf floor qsort rand srand _CIasin _CIacos _atoi64 _errno _isnan calloc exit realloc fprintf strrchr atof _isctype __mb_cur_max _mbsbtype _access _beginthreadex _endthread strstr _beginthread _strnicmp fseek strncpy memset memcpy strcpy ??3@YAXPAX@Z ??2@YAPAXI@Z __CxxFrameHandler __dllonexit _onexit _exit _XcptFilter _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _pctype malloc _itoa _strupr _stricmp _fcvt

mfc42

ord6142 ord772 ord500 ord5860 ord5606

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_4db8dce75a0eb7d4744ee20d4254f7e9_elex_wannacry

kernel32

user32

gdi32

advapi32

msvcrt

mfc42

generic