2026-08-22_0d5c6b1ef42edcd854a2f16aa8b52931_elex_wannacry

General

Target
2026-08-22_0d5c6b1ef42edcd854a2f16aa8b52931_elex_wannacry
Size 30KB
Sample260823-pypr7sgn9v
SHA256 9e1f70283e103fbc9858734b9b64d6be70c39ce0ad201a40d9e21ef34e6ab741
MD5 0d5c6b1ef42edcd854a2f16aa8b52931
SHA1 918ac43b6d9e14b1c0e729b4f804dbd44736d5ab
SHA512 46d6eae08e9500adef2f7564800e70d376879cccdb96204eb1b6c8cecddbdfd7de0bb9deb8a11abb02ff6bf13c7a374556ebbae76e2aaecaa95572c5b10c2f1c
SSDEEP 384:q/JYSrFQjGdzHNHP1lYpMYUzMk9hBcecy:g/3d91lN/zoy
TLSH
T179D284F2E74148E8D8039EBC843679436143A15E5E2A9A5D19D27E067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_0d5c6b1ef42edcd854a2f16aa8b52931_elex_wannacry

SHA256 9e1f70283e103fbc9858734b9b64d6be70c39ce0ad201a40d9e21ef34e6ab741
MD5 0d5c6b1ef42edcd854a2f16aa8b52931
SHA1 918ac43b6d9e14b1c0e729b4f804dbd44736d5ab
SHA512 46d6eae08e9500adef2f7564800e70d376879cccdb96204eb1b6c8cecddbdfd7de0bb9deb8a11abb02ff6bf13c7a374556ebbae76e2aaecaa95572c5b10c2f1c
SSDEEP 384:q/JYSrFQjGdzHNHP1lYpMYUzMk9hBcecy:g/3d91lN/zoy
TLSH
T179D284F2E74148E8D8039EBC843679436143A15E5E2A9A5D19D27E067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

24786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths