2026-08-20_c22cff1be74676208d0240e03ea244af_elex_upatre_wannacry

General

Target
2026-08-20_c22cff1be74676208d0240e03ea244af_elex_upatre_wannacry
Size 59KB
Sample260820-xhbjmstdnc
SHA256 6c5cc0f73241a546e9569f3179033b0ba63b682213d5916ded78c6b0102ed81c
MD5 c22cff1be74676208d0240e03ea244af
SHA1 9b0ba8a17d70d1c5c055f9105ee43bf4bf09be23
SHA512 6ef3490e2a61f378547155e502d5bc4b925d2f4dea3cbcf26e057a5f7b4a7881f9ab90fe56ccbea04239cabf94d420d3afd2b381e9803b1a326df3c864c18713
SSDEEP 768:xW9+F8BPtElggggggLvggggggggUaocdF+qqPbNMugJI/xZ9dHtTFmd1MVZy0Fi:ekoqzqTNMDSpZ9fTKMTZi
TLSH
T1814349386AD51572E37BDEB585F251CAB96DBC1339035C0E40B2F3440AB3BD2ADA191E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_c22cff1be74676208d0240e03ea244af_elex_upatre_wannacry

SHA256 6c5cc0f73241a546e9569f3179033b0ba63b682213d5916ded78c6b0102ed81c
MD5 c22cff1be74676208d0240e03ea244af
SHA1 9b0ba8a17d70d1c5c055f9105ee43bf4bf09be23
SHA512 6ef3490e2a61f378547155e502d5bc4b925d2f4dea3cbcf26e057a5f7b4a7881f9ab90fe56ccbea04239cabf94d420d3afd2b381e9803b1a326df3c864c18713
SSDEEP 768:xW9+F8BPtElggggggLvggggggggUaocdF+qqPbNMugJI/xZ9dHtTFmd1MVZy0Fi:ekoqzqTNMDSpZ9fTKMTZi
TLSH
T1814349386AD51572E37BDEB585F251CAB96DBC1339035C0E40B2F3440AB3BD2ADA191E
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

7856

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths