2026-08-21_ef2018ac3c66dd032a68f1f7b5a52838_elex_wannacry

General

Target
2026-08-21_ef2018ac3c66dd032a68f1f7b5a52838_elex_wannacry
Size 15KB
Sample260821-ebdrbawthy
SHA256 26aeb1e9b03f1aeac4430b0b32b251cfcecc65086f9fa58d0aa59d1fcad52e98
MD5 ef2018ac3c66dd032a68f1f7b5a52838
SHA1 97f428d65ab4d425275907e56b17fc9d6b9cfb65
SHA512 263148f3c28d2281dc35b874c5c70261e207f7114d169a25838acbf53d4c24905ce124d68b69a71df15b16e37ecd21365c9b7b959790f6b90e49bc276bd8c94a
SSDEEP 192:P5m591V5BwMhoER58xP6jvaQuJNpVHm/rCISXV2eBLMzK+8GaIXXx1XXaWcwE1oR:Pe9dBwMrO6eQutVHmmvAKGrMWc/1SnLd
TLSH
T1BA624CCBF9598B71CA218E702E6469356EE594B43930B4ABEB544A098C3D0C2D63F70F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_ef2018ac3c66dd032a68f1f7b5a52838_elex_wannacry

File Explorer

2026-08-21_ef2018ac3c66dd032a68f1f7b5a52838_elex_wannacry

.exe 15KB

2026-08-21_ef2018ac3c66dd032a68f1f7b5a52838_elex_wannacry

IMPHASH 4d333650666fecf3482501fc120e6226
SHA256 26aeb1e9b03f1aeac4430b0b32b251cfcecc65086f9fa58d0aa59d1fcad52e98
MD5 ef2018ac3c66dd032a68f1f7b5a52838
SHA1 97f428d65ab4d425275907e56b17fc9d6b9cfb65
SHA512 263148f3c28d2281dc35b874c5c70261e207f7114d169a25838acbf53d4c24905ce124d68b69a71df15b16e37ecd21365c9b7b959790f6b90e49bc276bd8c94a
SSDEEP 192:P5m591V5BwMhoER58xP6jvaQuJNpVHm/rCISXV2eBLMzK+8GaIXXx1XXaWcwE1oR:Pe9dBwMrO6eQutVHmmvAKGrMWc/1SnLd
TLSH
T1BA624CCBF9598B71CA218E702E6469356EE594B43930B4ABEB544A098C3D0C2D63F70F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA LocalAlloc Sleep CreateThread CreateMutexA CopyFileW GetFileSize CreateProcessA GetEnvironmentVariableW GetShortPathNameW GetStartupInfoA GetModuleHandleA ReadFile LocalFree GetLastError GetModuleFileNameW CloseHandle

user32

SendMessageA FindWindowExA

advapi32

RegQueryValueExA RegCloseKey RegSetValueExW RegOpenKeyExA

shell32

SHGetSpecialFolderPathW ShellExecuteW

msvcrt

_controlfp _except_handler3 __set_app_type memset __CxxFrameHandler strlen sprintf memcpy strcpy strcat _mbsnbcpy _mbsnbcmp atol _mbscmp atoi fclose fwrite fopen strstr wcslen wcstombs setlocale wcscmp wcscat mbstowcs wcsrchr wcscpy getenv strcmp time free __dllonexit _onexit _exit _XcptFilter exit _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode _strnicmp

wininet

HttpAddRequestHeadersA HttpOpenRequestA HttpEndRequestA InternetWriteFile HttpSendRequestA InternetReadFile HttpQueryInfoA InternetAttemptConnect InternetCloseHandle InternetConnectA InternetOpenA HttpSendRequestExA

ws2_32

gethostbyname inet_ntoa WSAStartup gethostname

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_ef2018ac3c66dd032a68f1f7b5a52838_elex_wannacry

kernel32

user32

advapi32

shell32

msvcrt

wininet

ws2_32

generic