2026-08-20_e7f312006e0df65cd1f4ee5d37cef881_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_e7f312006e0df65cd1f4ee5d37cef881_elex_wannacry
Size 184KB
Sample260820-le1tkstdmc
SHA256 4af91dbf144608f6e4193e0b4cb9883c45f456739f19cf50a926db805efb3e63
MD5 e7f312006e0df65cd1f4ee5d37cef881
SHA1 9a72651834e4afe5efde70145a7242de805f485b
SHA512 1856338990b6c647eee81a7d66fa88d64edb3d926f06f6de6ee8307d1dbbe523dc34258b3511f0399a0c44d01f4370c6921cee881d0b8e87b778b0233c525899
SSDEEP 768:bLV6FZdEnjZx3qBYEL3rwWxHoAyqC1PX74l0CiNC3hw3zs3a/gj0StgFDJ:b4zdEnjDaD1I1z4Wkc/ghtgV
TLSH
T14004B4EEF712858EEA61F6705A09AF6C07B41CF15A2CF8996451CFC87179E01C4AC1AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_e7f312006e0df65cd1f4ee5d37cef881_elex_wannacry

File Explorer

2026-08-20_e7f312006e0df65cd1f4ee5d37cef881_elex_wannacry

.exe 184KB

2026-08-20_e7f312006e0df65cd1f4ee5d37cef881_elex_wannacry

IMPHASH cb938d045a9b870fec894a55e8ae3ed3
SHA256 4af91dbf144608f6e4193e0b4cb9883c45f456739f19cf50a926db805efb3e63
MD5 e7f312006e0df65cd1f4ee5d37cef881
SHA1 9a72651834e4afe5efde70145a7242de805f485b
SHA512 1856338990b6c647eee81a7d66fa88d64edb3d926f06f6de6ee8307d1dbbe523dc34258b3511f0399a0c44d01f4370c6921cee881d0b8e87b778b0233c525899
SSDEEP 768:bLV6FZdEnjZx3qBYEL3rwWxHoAyqC1PX74l0CiNC3hw3zs3a/gj0StgFDJ:b4zdEnjDaD1I1z4Wkc/ghtgV
TLSH
T14004B4EEF712858EEA61F6705A09AF6C07B41CF15A2CF8996451CFC87179E01C4AC1AF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateEventA CloseHandle SizeofResource LockResource LoadResource FindResourceA GetModuleHandleA WaitForSingleObject SetEvent GetStartupInfoA

mfc42

ord5300 ord5302 ord2725 ord3346 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord825 ord815 ord641 ord800 ord2514 ord2621 ord5265 ord4376 ord4853 ord4998 ord6052 ord4078 ord5199 ord2396 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord4673 ord1146 ord1168 ord860 ord540 ord324 ord2289 ord2370 ord4234 ord5953 ord4710 ord2379 ord755 ord470 ord6334 ord4224 ord823 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4407 ord1775 ord3597 ord1576

msvcrt

__p__fmode __set_app_type __p__commode _except_handler3 _controlfp __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _onexit _setmbcp sprintf __CxxFrameHandler __dllonexit _adjust_fdiv

shell32

ShellExecuteA

user32

GetClientRect DrawIcon IsIconic SendMessageA IsWindow EnableWindow PostMessageA LoadIconA GetSystemMetrics

winmm

midiStreamProperty midiStreamStop midiOutShortMsg midiStreamOut midiOutPrepareHeader midiOutReset midiStreamOpen midiOutUnprepareHeader midiStreamClose midiStreamRestart

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_e7f312006e0df65cd1f4ee5d37cef881_elex_wannacry

kernel32

mfc42

msvcrt

shell32

user32

winmm

generic