2026-08-20_9beaf5f7aa1a3ec4061ac2bfd012af99_elex_wannacry

General

Target
2026-08-20_9beaf5f7aa1a3ec4061ac2bfd012af99_elex_wannacry
Size 40KB
Sample260820-kmgj8sshmc
SHA256 2ab6930c4f6f3ed3e34be5576de91ee7ba7daac958bd5d91d682ecd455d9e40f
MD5 9beaf5f7aa1a3ec4061ac2bfd012af99
SHA1 bd32978ec39d0fa5877a740e89b90857d8e911e4
SHA512 398ebecda42d42cda6d4b6e654194498f665f771b13471224b34ac7e6f0bfe568d87b7db6c1dc3e8a0c353fd96b236d414af25b26ae794beb15b0fe2c05b97e4
SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLBVAFJ6uTCailcym+:F/3ed1zZN/zoy0rtsDIilcym+
TLSH
T12D0323B9ABD419B6D673DEB9C5F265C3B822B01A79159C0D04D32B051E23B43FDA260F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_9beaf5f7aa1a3ec4061ac2bfd012af99_elex_wannacry

SHA256 2ab6930c4f6f3ed3e34be5576de91ee7ba7daac958bd5d91d682ecd455d9e40f
MD5 9beaf5f7aa1a3ec4061ac2bfd012af99
SHA1 bd32978ec39d0fa5877a740e89b90857d8e911e4
SHA512 398ebecda42d42cda6d4b6e654194498f665f771b13471224b34ac7e6f0bfe568d87b7db6c1dc3e8a0c353fd96b236d414af25b26ae794beb15b0fe2c05b97e4
SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0rtGzLBVAFJ6uTCailcym+:F/3ed1zZN/zoy0rtsDIilcym+
TLSH
T12D0323B9ABD419B6D673DEB9C5F265C3B822B01A79159C0D04D32B051E23B43FDA260F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

7465

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths