2026-08-20_1d3da6b71351943dce8c33718990c821_elex_wannacry

General

Target
2026-08-20_1d3da6b71351943dce8c33718990c821_elex_wannacry
Size 79KB
Sample260820-ws3v7sshme
SHA256 1a0c958ae692074120b84310d78826e1d5cfba9dca79ba015d3a271ce8a8f726
MD5 1d3da6b71351943dce8c33718990c821
SHA1 2e0d18a7a73b15e225b0c3cc3722f3a2dfa4445a
SHA512 b67cad8a5df60dfd69f62db173fdc8d09f8940920c0d17ff49cf339e58fd7512338f72e6fda8f68a58cf29c3e97ab05fc02f37f97f6847aecdef170ab57fe9f9
SSDEEP 1536:PAoDNEJeKAYfXrhNLPg10iRvwfVcafh6G0P0Ra+8QSW1d4:vDNEJe67hdg10ilwfVcafh6R0Ra+8OI
TLSH
T10483CEF8665D0D32E7A1C13FC7BE5ADDFA91D084E130ACD66AB0DA7108702A7D01F21A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_1d3da6b71351943dce8c33718990c821_elex_wannacry

File Explorer

2026-08-20_1d3da6b71351943dce8c33718990c821_elex_wannacry

.exe 79KB

2026-08-20_1d3da6b71351943dce8c33718990c821_elex_wannacry

IMPHASH 1630d655563ffd9d2cdaa667643e3218
SHA256 1a0c958ae692074120b84310d78826e1d5cfba9dca79ba015d3a271ce8a8f726
MD5 1d3da6b71351943dce8c33718990c821
SHA1 2e0d18a7a73b15e225b0c3cc3722f3a2dfa4445a
SHA512 b67cad8a5df60dfd69f62db173fdc8d09f8940920c0d17ff49cf339e58fd7512338f72e6fda8f68a58cf29c3e97ab05fc02f37f97f6847aecdef170ab57fe9f9
SSDEEP 1536:PAoDNEJeKAYfXrhNLPg10iRvwfVcafh6G0P0Ra+8QSW1d4:vDNEJe67hdg10ilwfVcafh6R0Ra+8OI
TLSH
T10483CEF8665D0D32E7A1C13FC7BE5ADDFA91D084E130ACD66AB0DA7108702A7D01F21A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11711

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

FindWindowA SendMessageA

advapi32

ChangeServiceConfig2A RegOpenKeyA RegQueryValueExA RegCloseKey RegSetValueExA RegCreateKeyExA SetServiceStatus StartServiceA CloseServiceHandle ChangeServiceConfigA OpenServiceA OpenSCManagerA RegisterServiceCtrlHandlerA StartServiceCtrlDispatcherA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv _tell _initterm _acmdln exit _XcptFilter _exit atoi _open _write _close _lseek _eof _read __CxxFrameHandler ??2@YAPAXI@Z ??3@YAXPAX@Z free malloc fopen fwrite fclose memcpy localtime strftime time srand rand strncpy strchr strcmp sprintf memset sscanf strcpy strlen strcat _stricmp __getmainargs __setusermatherr

kernel32

DuplicateHandle GetStartupInfoA OpenEventA GetCurrentProcessId CreateToolhelp32Snapshot Process32First Process32Next GetModuleHandleA HeapAlloc VirtualAllocEx ReadProcessMemory OpenProcess lstrcmpiA GetCurrentProcess GetVersion CreateFileA CloseHandle GetModuleFileNameA VirtualProtect DeleteFileA _lcreat _lwrite _lclose GetProcessHeap HeapFree BeginUpdateResourceA FindResourceA LoadResource LockResource SizeofResource UpdateResourceA EndUpdateResourceA SetFileAttributesA CopyFileA CreateProcessA WinExec SetFileTime Sleep GetLastError FreeLibrary LoadLibraryA GetProcAddress CreateEventA WaitForSingleObject GetWindowsDirectoryA SetCurrentDirectoryA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_1d3da6b71351943dce8c33718990c821_elex_wannacry

user32

advapi32

msvcrt

kernel32

generic