2026-08-21_c79698db697ea9a73fb4b26ba58b12f6_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-21_c79698db697ea9a73fb4b26ba58b12f6_elex_wannacry
Size 72KB
Sample260821-fmdfcstcld
SHA256 f0bab7b826ab0971b368205217a2a13527c199e95c5ae034be7b81430d18ca17
MD5 c79698db697ea9a73fb4b26ba58b12f6
SHA1 1c65273832659021f483f68a05409dbe49cdb2f9
SHA512 e734111632b1acac2072b712d658cfe4c6ff15cf1ff168d7d8cc91dd379361cdaeb9bfba1547d0d93a752a0978639d7afa14798aaaee49a6960ff84133e15c2f
SSDEEP 1536:sR7nYELEEEEEh5GFODuAN17aMiINn0IVJ9xz:UmD7aMiIKITz
TLSH
T139736C427BD0C457F8D3093048696B17CEBFF43561A6375BEB808EA8BC72596982D34B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_c79698db697ea9a73fb4b26ba58b12f6_elex_wannacry

File Explorer

2026-08-21_c79698db697ea9a73fb4b26ba58b12f6_elex_wannacry

.exe 72KB

2026-08-21_c79698db697ea9a73fb4b26ba58b12f6_elex_wannacry

IMPHASH 39af2d12ee5084817ee98e5c8f868679
SHA256 f0bab7b826ab0971b368205217a2a13527c199e95c5ae034be7b81430d18ca17
MD5 c79698db697ea9a73fb4b26ba58b12f6
SHA1 1c65273832659021f483f68a05409dbe49cdb2f9
SHA512 e734111632b1acac2072b712d658cfe4c6ff15cf1ff168d7d8cc91dd379361cdaeb9bfba1547d0d93a752a0978639d7afa14798aaaee49a6960ff84133e15c2f
SSDEEP 1536:sR7nYELEEEEEh5GFODuAN17aMiINn0IVJ9xz:UmD7aMiIKITz
TLSH
T139736C427BD0C457F8D3093048696B17CEBFF43561A6375BEB808EA8BC72596982D34B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegSetValueExA RegQueryValueExA RegCreateKeyExA SetSecurityInfo SetEntriesInAclA AdjustTokenPrivileges LookupPrivilegeValueA GetTokenInformation OpenProcessToken LookupAccountSidA RegEnumKeyExA RegOpenKeyExA RegEnumValueA RegDeleteValueA

wsock32

WSAStartup WSAGetLastError WSACleanup socket htons ioctlsocket inet_ntoa connect select recv gethostname gethostbyname inet_addr closesocket send

mpr

WNetCloseEnum

shlwapi

SHSetValueA SHGetValueA SHDeleteValueA SHDeleteKeyA

netapi32

NetGetDCName NetApiBufferFree

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize CoCreateInstance

user32

mouse_event SendMessageA GetForegroundWindow GetWindow GetWindowRect GetWindowTextA GetClassNameA GetSystemMetrics

msvcrt

fclose fread fseek fopen fwrite swprintf isdigit isalpha exit atoi _exit _XcptFilter _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 rename _controlfp _strnicmp sprintf memset strchr memcpy memcmp strncpy free time srand rand strcpy strcat malloc strlen strcmp _EH_prolog __CxxFrameHandler strrchr _access strstr _itoa

kernel32

GetVolumeInformationA GetStartupInfoA PeekNamedPipe ReadFile GetModuleHandleA WriteFile GetModuleFileNameA SetCurrentDirectoryA CreateProcessA MultiByteToWideChar GlobalAlloc GlobalFree DeleteFileA GetVersionExA GetFileSize CopyFileA RemoveDirectoryA FindNextFileA FindFirstFileA FindClose CreateFileA CreateDirectoryA GetFileAttributesA SetFileAttributesA TerminateProcess GetPriorityClass GetWindowsDirectoryA OpenProcess GetCurrentProcess DuplicateHandle GetLastError LocalFree GetLogicalDriveStringsA GetSystemDefaultLangID LoadLibraryA GetDriveTypeA GetProcAddress CreateToolhelp32Snapshot Process32First lstrcmpiA Process32Next FreeLibrary GetComputerNameA OpenMutexA CloseHandle SetEvent WaitForSingleObject CreateMutexA CreateEventA GetTickCount CreateThread Sleep

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_c79698db697ea9a73fb4b26ba58b12f6_elex_wannacry

advapi32

wsock32

mpr

shlwapi

netapi32

shell32

ole32

user32

msvcrt

kernel32

generic