2026-08-21_a46f33877d05b3fcdd1138241d1f8bfb_elex_wannacry

General

Target
2026-08-21_a46f33877d05b3fcdd1138241d1f8bfb_elex_wannacry
Size 48KB
Sample260821-eph8yssenh
SHA256 feeddd3f9416667d1809a7e9d76d35c1398833e2489a8603b544c66187a6fb3a
MD5 a46f33877d05b3fcdd1138241d1f8bfb
SHA1 dba0a98a87bf1675edcf6bbcd46618795c147169
SHA512 85a980e3d737cf5e58c9b3078fc214c56b2d8e89993f813a45ccab334b56fd50d69003c84ec40849e88a5748bd0950d4dd30daa5c3640e38932a3ae5c841f407
SSDEEP 768:ZHiG1ZmWSm0HIY5vprGG5znYsT3HeeymDS72mrJF5LFcMqiBplpdF:ZHD1zSmXYnr+n5yiBp
TLSH
T1F723F9128E80D06FC89115FBC4BA95FACF65FA90C3946BCF7F099BA11B041985F1369B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_a46f33877d05b3fcdd1138241d1f8bfb_elex_wannacry

File Explorer

2026-08-21_a46f33877d05b3fcdd1138241d1f8bfb_elex_wannacry

.exe 48KB

2026-08-21_a46f33877d05b3fcdd1138241d1f8bfb_elex_wannacry

IMPHASH c9ec2e60686d81c809c88c01a36486f7
SHA256 feeddd3f9416667d1809a7e9d76d35c1398833e2489a8603b544c66187a6fb3a
MD5 a46f33877d05b3fcdd1138241d1f8bfb
SHA1 dba0a98a87bf1675edcf6bbcd46618795c147169
SHA512 85a980e3d737cf5e58c9b3078fc214c56b2d8e89993f813a45ccab334b56fd50d69003c84ec40849e88a5748bd0950d4dd30daa5c3640e38932a3ae5c841f407
SSDEEP 768:ZHiG1ZmWSm0HIY5vprGG5znYsT3HeeymDS72mrJF5LFcMqiBplpdF:ZHD1zSmXYnr+n5yiBp
TLSH
T1F723F9128E80D06FC89115FBC4BA95FACF65FA90C3946BCF7F099BA11B041985F1369B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

35668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

CharUpperA

advapi32

RegCreateKeyExA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegCloseKey RegDeleteValueA

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetMalloc

ole32

CoInitialize CoCreateInstance

msvcrt

_except_handler3 _controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr __getmainargs _acmdln exit _XcptFilter _exit calloc memcpy fscanf strchr memset strstr strcmp toupper _ftol malloc fopen fclose fread fwrite free sprintf rename strrchr strlen strcpy strcat _EH_prolog __CxxFrameHandler _initterm

kernel32

GetStartupInfoA GetModuleHandleA GetFileTime SetFileTime LoadLibraryA GetProcAddress SetCurrentDirectoryA CreateProcessA SystemTimeToFileTime CompareFileTime RemoveDirectoryA CreateDirectoryA GetDriveTypeA GetLogicalDriveStringsA GetVolumeInformationA GetDiskFreeSpaceExA GetLocalTime CreateFileA GetFileSize MultiByteToWideChar FindFirstFileA FindNextFileA FindClose OpenMutexA CreateMutexA CloseHandle SetEvent WaitForSingleObject Sleep GetSystemDirectoryA lstrcmpiA CopyFileA GetFileAttributesA ExitProcess GetModuleFileNameA SetErrorMode GetSystemTime GetWindowsDirectoryA SetFileAttributesA DeleteFileA CreateEventA CreateThread

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_a46f33877d05b3fcdd1138241d1f8bfb_elex_wannacry

user32

advapi32

shell32

ole32

msvcrt

kernel32

generic