2026-08-31_8ff28f9ab0fe7d2ab755b12a2c63845a_elex_wannacry

General

Target
2026-08-31_8ff28f9ab0fe7d2ab755b12a2c63845a_elex_wannacry
Size 96KB
Sample260831-vrlpvsdn6s
SHA256 a09a7c3738ac4e0b87ce409acae9e30587bd7d46e9dd3744d50138f7e647bdaf
MD5 8ff28f9ab0fe7d2ab755b12a2c63845a
SHA1 02e79759de4926ecdc3f9f804266f27dfaa270b8
SHA512 0d0a5900c61fe98f1c32a8e539253034d3ff573a042434d1a955cfbdf795ae678f1e9bbb7c97c16abd186af50bba9cbb955a11539f7e53ef49c410aa383adb4c
SSDEEP 3072:EAbL3q6zvT6eqUNfdiKRiUUKeKDKaRBiTXK+Ifyvf5fhW9zXzmfcKO1zqufJK6fK:EIq6zvzqUNfdiKRiUUKeKDKaRBiTXK+7
TLSH
T1E5A3D55B6EA2C8B7C50804B4EABD63BCFFD3FC611AA0571B23D5CE195DB9844882D42D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-31_8ff28f9ab0fe7d2ab755b12a2c63845a_elex_wannacry

File Explorer

2026-08-31_8ff28f9ab0fe7d2ab755b12a2c63845a_elex_wannacry

.exe 96KB

2026-08-31_8ff28f9ab0fe7d2ab755b12a2c63845a_elex_wannacry

IMPHASH 3d86c61c5c942872424ab0037ff6d1d0
SHA256 a09a7c3738ac4e0b87ce409acae9e30587bd7d46e9dd3744d50138f7e647bdaf
MD5 8ff28f9ab0fe7d2ab755b12a2c63845a
SHA1 02e79759de4926ecdc3f9f804266f27dfaa270b8
SHA512 0d0a5900c61fe98f1c32a8e539253034d3ff573a042434d1a955cfbdf795ae678f1e9bbb7c97c16abd186af50bba9cbb955a11539f7e53ef49c410aa383adb4c
SSDEEP 3072:EAbL3q6zvT6eqUNfdiKRiUUKeKDKaRBiTXK+Ifyvf5fhW9zXzmfcKO1zqufJK6fK:EIq6zvzqUNfdiKRiUUKeKDKaRBiTXK+7
TLSH
T1E5A3D55B6EA2C8B7C50804B4EABD63BCFFD3FC611AA0571B23D5CE195DB9844882D42D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

43400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

__setusermatherr _adjust_fdiv __p__commode __p__fmode _initterm _except_handler3 _controlfp __dllonexit _onexit __getmainargs _acmdln exit _XcptFilter _exit rename _mbsicoll _mbscoll _mbsicmp _mbscmp _ismbcdigit _mbsnbcmp wcslen strlen _mbclen vsprintf _ismbcspace _mbsrev _mbslwr _mbsupr _mbspbrk _mbschr _mbsrchr _mbsstr memmove _mbsinc srand rand _tzset time localtime strftime _strdup strcmp memcpy sprintf fopen fwrite fclose atoi memset __set_app_type __CxxFrameHandler _strlwr

ws2_32

inet_ntoa WSAGetLastError gethostbyname

kernel32

GetCurrentProcessId SetCurrentDirectoryA CreateThread InterlockedIncrement InterlockedDecrement LocalFree LocalAlloc lstrlenA IsBadReadPtr IsBadWritePtr IsBadStringPtrA MultiByteToWideChar GlobalLock GlobalUnlock GetVersionExA TerminateProcess SetFileAttributesA OpenProcess GlobalAlloc GlobalFree CreateToolhelp32Snapshot Process32First Process32Next CreateMutexA Sleep WaitForSingleObject ReleaseMutex FindFirstFileA FindClose ReadFile CreateFileA WriteFile GetTempPathA GetTempFileNameA GetModuleFileNameA GetProcAddress LoadLibraryA GetLastError GetCurrentThreadId GetModuleHandleA GetStartupInfoA GetCurrentProcess

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-31_8ff28f9ab0fe7d2ab755b12a2c63845a_elex_wannacry

msvcrt

ws2_32

kernel32

generic