2026-08-20_5d3e08d1bcc57d4b1bf8bd58bd9045ef_elex_wannacry

General

Target
2026-08-20_5d3e08d1bcc57d4b1bf8bd58bd9045ef_elex_wannacry
Size 41KB
Sample260820-knxb3swtew
SHA256 cbec8509dfd94706cdf7d003fbcaeedaf3a2e6f29f2fb1ef304f4a51938434d4
MD5 5d3e08d1bcc57d4b1bf8bd58bd9045ef
SHA1 7ae8d6f41dc679a28bdb0876e7935010dfb7a293
SHA512 6e5df65f53c77108d3473c3a104dd04fba31e85822ebbc71b37c6427b574028d063f80ac025e30f9fc76db5c2716b3ee5af6f7eb67bd89899ab8cde3b97d9304
SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0xHtD3BOgTsSh3PJ:F/3ed1zZN/zoy0BtD3BOe1pJ
TLSH
T1871312B9ABC419B6D673CEB9C5F265C3B862B01A3D169C0D04D21B451E13B53FDA2A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_5d3e08d1bcc57d4b1bf8bd58bd9045ef_elex_wannacry

SHA256 cbec8509dfd94706cdf7d003fbcaeedaf3a2e6f29f2fb1ef304f4a51938434d4
MD5 5d3e08d1bcc57d4b1bf8bd58bd9045ef
SHA1 7ae8d6f41dc679a28bdb0876e7935010dfb7a293
SHA512 6e5df65f53c77108d3473c3a104dd04fba31e85822ebbc71b37c6427b574028d063f80ac025e30f9fc76db5c2716b3ee5af6f7eb67bd89899ab8cde3b97d9304
SSDEEP 384:I8/JYSrFQjGezfNHP1zZYpMYUzMk9hBcecy0xHtD3BOgTsSh3PJ:F/3ed1zZN/zoy0BtD3BOe1pJ
TLSH
T1871312B9ABC419B6D673CEB9C5F265C3B862B01A3D169C0D04D21B451E13B53FDA2A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

7465

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths