2026-08-20_8e9a49f8eeea31c569332b032c46029a_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_8e9a49f8eeea31c569332b032c46029a_elex_wannacry
Size 328KB
Sample260820-lvvx9sxtet
SHA256 29bf491173f67b227648afa825da4eea13fcc22be464311748de4e7abb2bb8dc
MD5 8e9a49f8eeea31c569332b032c46029a
SHA1 1555b295105b8eff144fdc85771baeed5897374f
SHA512 f48f6d4c9ce7fc444e3c0ea385f300a3e3d9249cb9cb18d77d5a514bac687f9320513eb7be25e32b70b8f01f0f24bce84536dd2d045a2718a0e93ca28d282bba
SSDEEP 1536:eyrRYWGfsas2QkFPIOgN30Mo4MnfsyoRrwLpEUub5cRX8lKCA9MmA+8vkqG/G:eyrRYWGfp/QkFPIOglo4Mf8+UR6x8cy
TLSH
T1AC643AEAE2245651D8F79B30F4175A224E76AE32C3DC51C7A935EE54EB720B0F9F2042
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_8e9a49f8eeea31c569332b032c46029a_elex_wannacry

File Explorer

2026-08-20_8e9a49f8eeea31c569332b032c46029a_elex_wannacry

.exe 328KB

2026-08-20_8e9a49f8eeea31c569332b032c46029a_elex_wannacry

IMPHASH b7e0a88457f78392bf9326da4bd18e0c
SHA256 29bf491173f67b227648afa825da4eea13fcc22be464311748de4e7abb2bb8dc
MD5 8e9a49f8eeea31c569332b032c46029a
SHA1 1555b295105b8eff144fdc85771baeed5897374f
SHA512 f48f6d4c9ce7fc444e3c0ea385f300a3e3d9249cb9cb18d77d5a514bac687f9320513eb7be25e32b70b8f01f0f24bce84536dd2d045a2718a0e93ca28d282bba
SSDEEP 1536:eyrRYWGfsas2QkFPIOgN30Mo4MnfsyoRrwLpEUub5cRX8lKCA9MmA+8vkqG/G:eyrRYWGfp/QkFPIOglo4Mf8+UR6x8cy
TLSH
T1AC643AEAE2245651D8F79B30F4175A224E76AE32C3DC51C7A935EE54EB720B0F9F2042
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeResource LoadResource GetTickCount FindResourceA SizeofResource GetStartupInfoA GetModuleHandleA CreateThread SetThreadPriority Sleep LockResource

comctl32

_TrackMouseEvent

gdi32

CreateCompatibleBitmap CreateFontA SetBkMode CreateCompatibleDC BitBlt DeleteObject GetStockObject ExtCreateRegion GetObjectA CreateDIBSection SetTextColor TextOutA GetDeviceCaps SelectObject

msvcrt

longjmp ??2@YAPAXI@Z __p__commode ??3@YAXPAX@Z __setusermatherr _initterm _adjust_fdiv _acmdln exit __getmainargs _exit malloc _XcptFilter sscanf getenv memcpy fread abs sin pow free calloc fabs __CxxFrameHandler srand _controlfp _except_handler3 __set_app_type __p__fmode memset sprintf _ftol _setjmp3 rand

user32

GetAsyncKeyState TranslateMessage LoadCursorA SetWindowPos GetActiveWindow ReleaseDC GetDC LoadBitmapA GetWindowLongA SetWindowLongA GetDlgItem MessageBoxA CallWindowProcA RedrawWindow BeginPaint SendMessageA EndPaint GetUpdateRect SetCursor GetSystemMetrics LoadIconA RegisterClassA UpdateWindow SetWindowRgn ShowWindow PeekMessageA PostMessageA DefWindowProcA CreateWindowExA DispatchMessageA PostQuitMessage

winmm

waveOutUnprepareHeader waveOutGetPosition waveOutWrite waveOutPrepareHeader waveOutReset waveOutClose waveOutOpen

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_8e9a49f8eeea31c569332b032c46029a_elex_wannacry

kernel32

comctl32

gdi32

msvcrt

user32

winmm

generic