2026-08-26_ffd5fa44fe0a3ebd4bf3f9dba4c846c6_elex_smoke-loader_wannacry_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-26_ffd5fa44fe0a3ebd4bf3f9dba4c846c6_elex_smoke-loader_wannacry_wapomi
Size 500KB
Sample260826-3qpdcsvzbw
SHA256 1cc44379082ec9e37896ea88de3e93a50ea876bbaa84eadb3e81834cfb409c41
MD5 ffd5fa44fe0a3ebd4bf3f9dba4c846c6
SHA1 476d02ddb7c686559d17de60ae442284a29e2eb1
SHA512 aad58f9c5c633a36a0e4edbc67a53ab73bc52190ee2d579869a72f3b051e54a36ea09d4d71c6faf7222d718c19503c67a1acc445be143f4867ce06d0b822df8a
SSDEEP 6144:tn1fxSXJ56oQ4OZMAfquGG3UaBXz4wFVU4eOmdhxzCT5jmlMUXAl1vxRMXfk5/XN:tnzSOoQVMAvGGEa1Ewxe9Q5alMf1vAv
TLSH
T1A9B4390639FCC73BE3D24531CE6EBB90B0F5B9684F2148973AD41D1C2A76992E316A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-26_ffd5fa44fe0a3ebd4bf3f9dba4c846c6_elex_smoke-loader_wannacry_wapomi

File Explorer

2026-08-26_ffd5fa44fe0a3ebd4bf3f9dba4c846c6_elex_smoke-loader_wannacry_wapomi

.exe 500KB

2026-08-26_ffd5fa44fe0a3ebd4bf3f9dba4c846c6_elex_smoke-loader_wannacry_wapomi

IMPHASH 87ae18e92c07049d6dd3efaa3c9d54d0
SHA256 1cc44379082ec9e37896ea88de3e93a50ea876bbaa84eadb3e81834cfb409c41
MD5 ffd5fa44fe0a3ebd4bf3f9dba4c846c6
SHA1 476d02ddb7c686559d17de60ae442284a29e2eb1
SHA512 aad58f9c5c633a36a0e4edbc67a53ab73bc52190ee2d579869a72f3b051e54a36ea09d4d71c6faf7222d718c19503c67a1acc445be143f4867ce06d0b822df8a
SSDEEP 6144:tn1fxSXJ56oQ4OZMAfquGG3UaBXz4wFVU4eOmdhxzCT5jmlMUXAl1vxRMXfk5/XN:tnzSOoQVMAvGGEa1Ewxe9Q5alMf1vAv
TLSH
T1A9B4390639FCC73BE3D24531CE6EBB90B0F5B9684F2148973AD41D1C2A76992E316A1D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

512000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_ReplaceIcon InitCommonControlsEx CreateToolbarEx CreateStatusWindowW ord17 ImageList_GetImageCount ImageList_AddMasked ImageList_Create ImageList_Destroy PropertySheetW

comdlg32

CommDlgExtendedError GetOpenFileNameW

mpr

WNetOpenEnumW WNetEnumResourceW WNetGetResourceParentW WNetGetResourceInformationW WNetAddConnection2W WNetCloseEnum

gdi32

DeleteObject

oleaut32

SysStringByteLen VariantCopy VariantClear SysAllocString SysAllocStringLen SysStringLen SysFreeString

ole32

CoTaskMemFree OleUninitialize OleInitialize CoTaskMemAlloc RevokeDragDrop DoDragDrop CoCreateInstance ReleaseStgMedium CoInitialize RegisterDragDrop CoUninitialize

user32

RemoveMenu CheckMenuRadioItem CheckMenuItem AppendMenuW GetMenu LoadMenuW SetMenu DrawMenuBar GetSubMenu EnableMenuItem IsDlgButtonChecked CheckDlgButton CheckRadioButton IsZoomed GetClientRect ReleaseCapture SetCapture GetCapture LoadIconW GetWindowPlacement SetWindowPlacement LoadAcceleratorsW GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW PostQuitMessage SetDlgItemTextW GetFocus GetKeyState InvalidateRect PostMessageW SetWindowTextW EndDialog EnableWindow DestroyWindow SetFocus CreatePopupMenu DestroyMenu LoadBitmapW MessageBoxW DefWindowProcW GetClassInfoW LoadCursorW RegisterClassW CallWindowProcW CreateWindowExW DialogBoxParamW SetWindowLongW GetWindowLongW ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect SystemParametersInfoW GetDialogBaseUnits GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW InsertMenuItemW SetMenuItemInfoW GetMenuItemInfoW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW MapVirtualKeyW SetTimer UpdateWindow RegisterClipboardFormatW WindowFromPoint ChildWindowFromPointEx IsWindowEnabled GetCursorPos TrackPopupMenuEx GetMenuItemCount ClientToScreen SetCursor KillTimer DestroyIcon GetParent

advapi32

AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA GetFileSecurityW SetFileSecurityW RegQueryValueExW RegSetValueExW RegEnumKeyExW RegDeleteKeyW RegCloseKey LookupAccountNameW LsaOpenPolicy GetUserNameW LsaClose LsaAddAccountRights LookupPrivilegeValueW OpenProcessToken RegCreateKeyExW RegOpenKeyExW

shell32

SHGetFileInfoW SHBrowseForFolderW ShellExecuteExW DragQueryFileW DragFinish SHGetMalloc SHGetDesktopFolder SHFileOperationW SHGetSpecialFolderLocation ShellExecuteW ExtractIconExW SHChangeNotify SHGetPathFromIDListW

msvcrt

_adjust_fdiv __p__commode __p__fmode __set_app_type _initterm __setusermatherr __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex wcscat _wcsicmp __CxxFrameHandler wcscmp memcpy memmove _CxxThrowException _controlfp strcmp wcsstr malloc free srand rand memset wcslen memcmp strlen _purecall

kernel32

GetCompressedFileSizeW GetCommandLineW GetVersionExW InterlockedDecrement InterlockedIncrement AreFileApisANSI EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FileTimeToLocalFileTime CreateEventW CreateFileMappingW MapViewOfFile UnmapViewOfFile WaitForSingleObject WaitForMultipleObjects GetStdHandle GetSystemTimeAsFileTime FileTimeToDosDateTime GlobalMemoryStatus lstrlenW FileTimeToSystemTime CompareFileTime CreateProcessW GetCurrentProcess GlobalFree GlobalAlloc GetFileInformationByHandle SetEndOfFile WriteFile ReadFile GetUserDefaultLangID SetFilePointer GetFileSize GetLogicalDriveStringsW FindFirstChangeNotificationW FindCloseChangeNotification GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindNextChangeNotification GetCurrentThreadId GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetWindowsDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryW LoadLibraryExW FreeLibrary GlobalLock GlobalUnlock HeapAlloc GetProcessHeap HeapFree GetModuleHandleW GetProcAddress GetDiskFreeSpaceW GetDriveTypeW GetVolumeInformationW WideCharToMultiByte MultiByteToWideChar GetLastError GetTickCount GetSystemDefaultLangID GlobalSize OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot Sleep SetPriorityClass FindClose CopyFileW ExpandEnvironmentStringsW VirtualAlloc VirtualFree SetEvent InitializeCriticalSection LoadLibraryA GetStartupInfoA DeviceIoControl

Name

.text

Size

357KB

Virtual Size

357KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

q�ƣu�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-26_ffd5fa44fe0a3ebd4bf3f9dba4c846c6_elex_smoke-loader_wannacry_wapomi

comctl32

comdlg32

mpr

gdi32

oleaut32

ole32

user32

advapi32

shell32

msvcrt

kernel32

generic