2026-08-21_a6da7c25a44aab017396f695a51da35b_elex_poison-ivy_wannacry

resource
2026-08-21_a6da7c25a44aab017396f695a51da35b_elex_poison-ivy_wannacry

IMPHASH a60a730e8f74694f39e90595c6625b2d
SHA256 95907a18b056a653202f14770aeee10d57c7862eb9f63265253de5bfd20e24b1
MD5 a6da7c25a44aab017396f695a51da35b
SHA1 07541f02fa4c3d1cea10ab7e0edb85c5098b3cd1
SHA512 1bcd32f6b00eb5e0854d64f3e408d45858075f547aff19234c8f86f12a075b27e8b0beb9f84106680bdb66d49630c371d559bac2e101b85558a46f4101a915e1
SSDEEP 1536:u0YDAe6D+TxoU6GI6dTFHJ1c6GIp6Wcf0J5EBcDBsyEZv2kp:u0YA/CxoUdpjcAeBFHZfp
TLSH
T17B7337189D230C22F4317C74B3A81AE11FFCDC577182327FCF12599894AA2991DB6BB8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord561 ord825 ord815 ord641 ord2514 ord5265 ord5731 ord4998 ord6052 ord4078 ord1775 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5280 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4627 ord4425 ord3597 ord1146 ord1168 ord324 ord4234 ord4710 ord2379 ord755 ord470 ord4853 ord2512 ord2554 ord4486 ord6375 ord4274 ord4376 ord4673 ord1576

msvcrt

_initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _acmdln exit _XcptFilter _exit _onexit __dllonexit __CxxFrameHandler _setmbcp __getmainargs

kernel32

ExitProcess CreateThread VirtualAlloc GetModuleHandleA GetStartupInfoA WaitForSingleObject

user32

DrawIcon GetClientRect GetSystemMetrics IsIconic EnableWindow LoadIconA SendMessageA

.data

SHA256 9623a4c8bacea4ecdf3e370f89237e440bd7410efd8d6927fc365e0c756990b0
MD5 8660488ec4acdc83c3a54bfc95c2bcd1
SHA1 7cf36ff257e3bf6eb97fa4dfd4fc772b504becc2
SHA512 747905b05e4e2edb1ef51922ea6a8293910d623b27c853fe2ed3e70f637a86f4a4e7665724c70c07ac9676c33c37a660325cc719b9fd1546ce831e1890292cf5
SSDEEP 1536:j0YDAe6D+TxoU6GI6dTFHJ1c6GIp6Wcf0J5EBcDBsyEZ:j0YA/CxoUdpjcAeBFHZ
TLSH
T1BF43D030ED331625F57A79BC37187F8276C84ED8E1427671462329F0944F2E63C5A5AD
MD5 SHA1 SHA512 SSDEEP TLSH

.rdata

SHA256 efe5d364b496525d8ca5110a5d69ca0fafc1eea8fb1c1f297ee5b3dde8544384
MD5 4454787a05b7d9f6deb6ee2f43ab0c77
SHA1 f0b37079ee39b3d7ea50d8932e21ef7cb142d888
SHA512 33beb478c5ca8cd323131d8c6738fb442c80dda9e8d8af3ceb8deaa6c08268547d128567c24fa44731ecfc7ef5c1cef2bc37c54d8b1c925e80d3b21204a17dd0
TLSH
T1F48131DBD6095CF1C5362E74A7F72E8A81E200D30DA2BAE2494CE14C256B70E2B57786
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/102

SHA256 dcacadb951990393fa8dc3ca7aa8f5a39449f58d862e806714dedaaad3e770ed
MD5 984a333e31435b0b7ce6691063e6ebca
SHA1 e093fc0e9802caa4bbd244dc47e894cd69059e71
SHA512 98e5c64249bcc33cbb7f27f52bcc04b1468aa573ee804d75caf41f3b007ac7dc460f01e72e8590d0fd83e8fc52c0b0e0c86afb0daaf76b64f1228362b8f07231
TLSH
T112B022028330CC0BCC32C33C20BCA3022A00FC020830030BB3A2F30B0C20CC0CE02208
MD5 SHA1 SHA512 TLSH

.rsrc/1033/EXE1/129

SHA256 f552f0b48d84c5e7f16af0c1d481a9b36484f59b4b4acf7521b1e101983ee03e
MD5 b20a688b34177af67328980f367f2aac
SHA1 00b0526fd8c94a6865efcb0156c5267a19035323
SHA512 6f9b9f0ab78a24b1ba4c68e4b6e16bda7884c1af294ba0c6a609d6b40f92fc9e4be67106fb43162498ef4386b693f4164fc2eaf3eab5beade3730cfea5db2ae3
TLSH
T1780111A08C0BCC0BFA32B00EB2000823C030EA0F00C002C03B080E02808AA208AB0F20
MD5 SHA1 SHA512 TLSH

.rsrc/1033/EXE2/130

SHA256 561a73260505b0d7d4c17af9f8fe188775055bd86be9312f091afb5ffe5b0ad0
MD5 5e31aec306cf648e915045dcdf182eb0
SHA1 60436c8c7d4b5607d230ba09d99569015f6ed58f
SHA512 2ab58324157b424063f78a490c65ce1b2e4d1bcc7fa676cdf031d852a9ef2ea480d57a489b4de0adc9c8deefe36783464a83d4c5deeafb25ef72d2935439b1d7
TLSH
T159B01226724D7F304003510DC8FB961244D4005394183175D50550494A65BCA63B249B
MD5 SHA1 SHA512 TLSH

.rsrc/1033/MANIFEST/1

SHA256 82a98c88d3dd57a6ebc0fe7167a86875ed52ebddc6374ad640407efec01b1393
MD5 f9e2887828846b3d383bdf9d0fded5e3
SHA1 a93486e2363d2e85646018aec5fcc1b563806391
SHA512 2bc8419f28289daa09868e8465f5ce04f1b8aa5daf9fc8e285e19e337cc0ccd2e72b5ea703b4c79e2cfaba1ee059a82a5448c58dfe9f805df4cc16aadeb83ec7
TLSH
T14901D082C014EF3A972105F22EBBE42462BD532606AC468D58D1F97BAF4B3DA85421A2
MD5 SHA1 SHA512 TLSH

.rsrc/1033/version.txt

SHA256 e1c91c68e9299b720132279914eb86642f92d772d0a742793ecf461fe28fe418
MD5 fd03da73050459964d0cdd49cb682444
SHA1 a5963f3b522faf523d238c1c58b42b8bb84cec5e
SHA512 6a9fbe3fcf5e69609b37fa2125a380d80788ee4781a67deb5fa6b5724c0a67652a8906dd7184cd5989a660d55ac0c1756eab2f3c1ac2687961d18b00690b4d0e
TLSH
T149315E0696FA2198A0B76A89AFEACD3203973D10053DE25EA9CC7E4D0FD340455117F7
MD5 SHA1 SHA512 TLSH

.rsrc/2052/GROUP_ICON/128

SHA256 b10e28a32eddb2ab20a46ceae59d9c0786911eb20f0c8dd2a28421f226ea2b8b
MD5 d59e0d372ea5fd8c1f4de744376a6af4
SHA1 6883ce60e71a83424db0b41d0ab6bf61080e3de2
SHA512 d15eb44f5837568d51c810fc31298ac3270cfdd956e83cb49572804da63b248b44a7b55dd2aa700a92926e176a263aaf374b130a62c4031bf4d271c2ae0f0405
MD5 SHA1 SHA512

.rsrc/2052/ICON/1.ico

SHA256 39cfb3d1e16208ab2d805be71cc707981f751aece1604973b770ff997000d4c9
MD5 5b2d6e1e48a04ecb75278bc7af5a6155
SHA1 2176ae656193f90733f09a455f298c2462821c16
SHA512 7f8a29b6085477dd440b33a5d206d7f967d994e597df9248002d05df7786bcde7176720a1fc3a8708c00d2fa63f5ced492c5656650f32d9b71cfad04417ce5b1
TLSH
T1C801A766BA2FE206CCE0197C471B8AE74C643C135A1080FB2722BF3D7D74B90A17D685
MD5 SHA1 SHA512 TLSH

.rsrc/2052/ICON/2.ico

SHA256 af393c97914697f367023c83e8544521b8d621b3add2538166f44125251c0918
MD5 08dab26d6c1f74d95ae4b7375c949807
SHA1 5c6e2906732912765b38efa837f18c9521702562
SHA512 4dc31597580b692aa83e122abe1d7c74a372b6569b620ed3e6865beb5978f169327da6dfd53a9b8be6358c626833cebc8c011079e95a61f17724cd66e880e6d0
TLSH
T1CBE0A913632AA040D8000138D04F9ABC5D20BC23841A01C72FF0BD4EACB8324F04B0A0
MD5 SHA1 SHA512 TLSH

.rsrc_1

SHA256 ee4ef78247c9a09477f1206c6be33d08e5a22ccafa105ffcccaf496800d40735
MD5 c2813c27760bf7eb21d5d28b2581fb4c
SHA1 515593c94cb715e9da19aa11d6fd718d40aec5c4
SHA512 93b049ca449fc23a2499122d1dd96d4e62af4f7b7f65ff58afd8f70338517e1b2a17fabfb3c338229836d56a4112b73eeea28d7531defa06f026145f46ccfbc3
MD5 SHA1 SHA512

.text

SHA256 4d85c2311e995d6eb20bb04c24c23f5afa6aadf4352bea0b3982f02a8271caba
MD5 db2f79d8bfe3a5173e62b08111a803f3
SHA1 9ecc0944ea93282c0cf1db281c9425a460408d24
SHA512 08dc723103dc61237e0c4a3922a2bafc2fccb7a6d9ab1b320d7313d6237b0dbfd9ee7c45587a91f31e86eeb545cc1ba6cddab462f2f0f0fbef26bc9d9dce9c2a
TLSH
T17A81411A5E7680B6CB49CC3123AD557DCE75E8E99344878F4B2BDFE4C130B9D412A04D
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer