2026-08-20_4de26886511863da599f46090255cc2a_elex_nymaim_rhadamanthys_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-20_4de26886511863da599f46090255cc2a_elex_nymaim_rhadamanthys_wannacry
Size 52KB
Sample260820-wheevswsdt
SHA256 bc2337c47befee1f21d2c985be688aaef4669ed60d0947a7847bb686eeb55a50
MD5 4de26886511863da599f46090255cc2a
SHA1 4855c3d9d223fc3602ff7fd4dfca81be620c0eb3
SHA512 2d9a055c847b565e97afa20b100bba0ead2d9e096f59e71dd9ec82f51979dc5d0f6d91c4db97dcf7cd1771e0b842117fb710da196e06b361f807a7b541d7ffd1
SSDEEP 768:DlQ4hrvaEGU4aikqykezg2JlmjYioRo+ORlZ:5LhE1Dezg2JljoVPZ
TLSH
T104337D22F8ED45B3CD518EB115BB4B362B3FF912065141476F08ED9E6DB2284C93236B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_4de26886511863da599f46090255cc2a_elex_nymaim_rhadamanthys_wannacry

File Explorer

2026-08-20_4de26886511863da599f46090255cc2a_elex_nymaim_rhadamanthys_wannacry

.exe 52KB

2026-08-20_4de26886511863da599f46090255cc2a_elex_nymaim_rhadamanthys_wannacry

IMPHASH 12a30b523ac71a3cbe9145c89400dd7f
SHA256 bc2337c47befee1f21d2c985be688aaef4669ed60d0947a7847bb686eeb55a50
MD5 4de26886511863da599f46090255cc2a
SHA1 4855c3d9d223fc3602ff7fd4dfca81be620c0eb3
SHA512 2d9a055c847b565e97afa20b100bba0ead2d9e096f59e71dd9ec82f51979dc5d0f6d91c4db97dcf7cd1771e0b842117fb710da196e06b361f807a7b541d7ffd1
SSDEEP 768:DlQ4hrvaEGU4aikqykezg2JlmjYioRo+ORlZ:5LhE1Dezg2JljoVPZ
TLSH
T104337D22F8ED45B3CD518EB115BB4B362B3FF912065141476F08ED9E6DB2284C93236B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25298

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

440B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-08-20_4de26886511863da599f46090255cc2a_elex_nymaim_rhadamanthys_wannacry

kernel32

user32

generic