2026-08-21_39610306320d9fa46977bda7c1ef8be9_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_39610306320d9fa46977bda7c1ef8be9_elex_wannacry
Size 28KB
Sample260821-ccwmeaep21
SHA256 85e74e9cae378fe9c32ea69e06f659104e22acc2f268191b3e410a44efe76a0d
MD5 39610306320d9fa46977bda7c1ef8be9
SHA1 09af10b8077510ebd62dec83cb48d407f90f799f
SHA512 f53926ca8dcb3c61d3a51f5cb123719f40b5b3c8089a133248ff15392067111222090e9d46e9023f82e2c537555aad398b524ff8e53d83f122ecfa2081f5c440
SSDEEP 768:hINb8uJpT9joczgA4meL8Bkzk67q86Q8oUJNcFP:hIF88p5MccA4mBWz3u8T8oP
TLSH
T103D29D51D5C180B8F9B25DB1266EF77ED8BB7058032225CB4B50DCBA4C37291F12E389
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_39610306320d9fa46977bda7c1ef8be9_elex_wannacry

File Explorer

2026-08-21_39610306320d9fa46977bda7c1ef8be9_elex_wannacry

.exe 28KB

2026-08-21_39610306320d9fa46977bda7c1ef8be9_elex_wannacry

IMPHASH 585d7fb02beb58789553f4b8f2500cc2
SHA256 85e74e9cae378fe9c32ea69e06f659104e22acc2f268191b3e410a44efe76a0d
MD5 39610306320d9fa46977bda7c1ef8be9
SHA1 09af10b8077510ebd62dec83cb48d407f90f799f
SHA512 f53926ca8dcb3c61d3a51f5cb123719f40b5b3c8089a133248ff15392067111222090e9d46e9023f82e2c537555aad398b524ff8e53d83f122ecfa2081f5c440
SSDEEP 768:hINb8uJpT9joczgA4meL8Bkzk67q86Q8oUJNcFP:hIF88p5MccA4mBWz3u8T8oP
TLSH
T103D29D51D5C180B8F9B25DB1266EF77ED8BB7058032225CB4B50DCBA4C37291F12E389
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

23695

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleA InterlockedIncrement LoadLibraryA MultiByteToWideChar GlobalMemoryStatus GetVersionExW FreeLibrary LoadLibraryW TerminateProcess WriteFile WideCharToMultiByte WaitForSingleObject ReadFile PeekNamedPipe lstrcatW GetWindowsDirectoryW GetTickCount lstrlenA lstrcpyA GetShortPathNameA CreateThread Sleep GetPrivateProfileStructW GetModuleFileNameW WritePrivateProfileStructW GlobalFree LeaveCriticalSection lstrcmpA EnterCriticalSection lstrcpynA DeleteCriticalSection InitializeCriticalSection GetStartupInfoW CreateProcessW CloseHandle DeleteFileW GetModuleHandleW GetProcAddress GetVolumeInformationW FindFirstFileW lstrcmpW lstrlenW FindNextFileW FindClose lstrcpyW GetDriveTypeW GetModuleFileNameA GetDiskFreeSpaceExW GetStartupInfoA

gdi32

GetStockObject SelectPalette RealizePalette GetDIBits CreateCompatibleDC SelectObject GetDeviceCaps StretchBlt DeleteObject DeleteDC CreateCompatibleBitmap

advapi32

GetUserNameW

shell32

ShellExecuteA ShellExecuteW

ws2_32

gethostname inet_ntoa htons connect closesocket WSAIoctl setsockopt gethostbyname select WSAGetLastError send recv htonl WSACleanup socket WSAStartup ntohs bind inet_addr shutdown

shlwapi

PathRemoveFileSpecW PathFindFileNameW PathFileExistsW PathAppendW PathUnquoteSpacesW StrStrIA PathRemoveExtensionA PathFindFileNameA PathAppendA PathRemoveFileSpecA PathRenameExtensionW PathIsRelativeW StrStrA PathGetArgsW PathRemoveArgsW PathIsDirectoryW

msvcrt

_strnicmp _filelength _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit fopen fwprintf time atoi sprintf strncpy srand rand _snprintf wcsncpy malloc free _wfopen fseek fwrite fflush fclose fread __CxxFrameHandler ??2@YAPAXI@Z wcscpy ??3@YAXPAX@Z

netapi32

DsRoleFreeMemory DsRoleGetPrimaryDomainInformation NetApiBufferFree NetUserGetInfo

secur32

InitSecurityInterfaceA

winhttp

WinHttpGetIEProxyConfigForCurrentUser

rasapi32

RasEnumConnectionsW RasGetProjectionInfoW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_39610306320d9fa46977bda7c1ef8be9_elex_wannacry

kernel32

gdi32

advapi32

shell32

ws2_32

shlwapi

msvcrt

netapi32

secur32

winhttp

rasapi32

generic