2026-09-09_e5c38df835ee05ba6d059786989be2d1_elex_ramnit_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-09_e5c38df835ee05ba6d059786989be2d1_elex_ramnit_wannacry
Size 580KB
Sample260910-18773seh68
SHA256 b7d47c40cc18cb7af5915e7f05feff2ce12c8c50599ff3cfeabee4369c43b5ab
MD5 e5c38df835ee05ba6d059786989be2d1
SHA1 3091329e2d53e773d77f40890b9f60c2eaeba824
SHA512 1bd4f71f883927a9317a0bc006593d136fedbee83cbd8a9c1b35ae552a1ffc8a76d10bb422246329dc34159594a3d295fddc7107b89972283d08d99a60bc3530
SSDEEP 12288:0Gruf026ZlmR70Y/k9VS+LPMRMJrueWtjT9o65i:Buf0XoxUS+Lk2JrVqH9L5i
TLSH
T1FAC46B0639FCC737E3D25630DE6CFB90B0F5BA684F31489736D4291C2A76986A316A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-09_e5c38df835ee05ba6d059786989be2d1_elex_ramnit_wannacry

File Explorer

2026-09-09_e5c38df835ee05ba6d059786989be2d1_elex_ramnit_wannacry

.exe 580KB

2026-09-09_e5c38df835ee05ba6d059786989be2d1_elex_ramnit_wannacry

IMPHASH 87ae18e92c07049d6dd3efaa3c9d54d0
SHA256 b7d47c40cc18cb7af5915e7f05feff2ce12c8c50599ff3cfeabee4369c43b5ab
MD5 e5c38df835ee05ba6d059786989be2d1
SHA1 3091329e2d53e773d77f40890b9f60c2eaeba824
SHA512 1bd4f71f883927a9317a0bc006593d136fedbee83cbd8a9c1b35ae552a1ffc8a76d10bb422246329dc34159594a3d295fddc7107b89972283d08d99a60bc3530
SSDEEP 12288:0Gruf026ZlmR70Y/k9VS+LPMRMJrueWtjT9o65i:Buf0XoxUS+Lk2JrVqH9L5i
TLSH
T1FAC46B0639FCC737E3D25630DE6CFB90B0F5BA684F31489736D4291C2A76986A316A1D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

512000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_ReplaceIcon InitCommonControlsEx CreateToolbarEx CreateStatusWindowW ord17 ImageList_GetImageCount ImageList_AddMasked ImageList_Create ImageList_Destroy PropertySheetW

comdlg32

CommDlgExtendedError GetOpenFileNameW

mpr

WNetOpenEnumW WNetEnumResourceW WNetGetResourceParentW WNetGetResourceInformationW WNetAddConnection2W WNetCloseEnum

gdi32

DeleteObject

oleaut32

SysStringByteLen VariantCopy VariantClear SysAllocString SysAllocStringLen SysStringLen SysFreeString

ole32

CoTaskMemFree OleUninitialize OleInitialize CoTaskMemAlloc RevokeDragDrop DoDragDrop CoCreateInstance ReleaseStgMedium CoInitialize RegisterDragDrop CoUninitialize

user32

RemoveMenu CheckMenuRadioItem CheckMenuItem AppendMenuW GetMenu LoadMenuW SetMenu DrawMenuBar GetSubMenu EnableMenuItem IsDlgButtonChecked CheckDlgButton CheckRadioButton IsZoomed GetClientRect ReleaseCapture SetCapture GetCapture LoadIconW GetWindowPlacement SetWindowPlacement LoadAcceleratorsW GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW PostQuitMessage SetDlgItemTextW GetFocus GetKeyState InvalidateRect PostMessageW SetWindowTextW EndDialog EnableWindow DestroyWindow SetFocus CreatePopupMenu DestroyMenu LoadBitmapW MessageBoxW DefWindowProcW GetClassInfoW LoadCursorW RegisterClassW CallWindowProcW CreateWindowExW DialogBoxParamW SetWindowLongW GetWindowLongW ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect SystemParametersInfoW GetDialogBaseUnits GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW InsertMenuItemW SetMenuItemInfoW GetMenuItemInfoW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW MapVirtualKeyW SetTimer UpdateWindow RegisterClipboardFormatW WindowFromPoint ChildWindowFromPointEx IsWindowEnabled GetCursorPos TrackPopupMenuEx GetMenuItemCount ClientToScreen SetCursor KillTimer DestroyIcon GetParent

advapi32

AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA GetFileSecurityW SetFileSecurityW RegQueryValueExW RegSetValueExW RegEnumKeyExW RegDeleteKeyW RegCloseKey LookupAccountNameW LsaOpenPolicy GetUserNameW LsaClose LsaAddAccountRights LookupPrivilegeValueW OpenProcessToken RegCreateKeyExW RegOpenKeyExW

shell32

SHGetFileInfoW SHBrowseForFolderW ShellExecuteExW DragQueryFileW DragFinish SHGetMalloc SHGetDesktopFolder SHFileOperationW SHGetSpecialFolderLocation ShellExecuteW ExtractIconExW SHChangeNotify SHGetPathFromIDListW

msvcrt

_adjust_fdiv __p__commode __p__fmode __set_app_type _initterm __setusermatherr __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex wcscat _wcsicmp __CxxFrameHandler wcscmp memcpy memmove _CxxThrowException _controlfp strcmp wcsstr malloc free srand rand memset wcslen memcmp strlen _purecall

kernel32

GetCompressedFileSizeW GetCommandLineW GetVersionExW InterlockedDecrement InterlockedIncrement AreFileApisANSI EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FileTimeToLocalFileTime CreateEventW CreateFileMappingW MapViewOfFile UnmapViewOfFile WaitForSingleObject WaitForMultipleObjects GetStdHandle GetSystemTimeAsFileTime FileTimeToDosDateTime GlobalMemoryStatus lstrlenW FileTimeToSystemTime CompareFileTime CreateProcessW GetCurrentProcess GlobalFree GlobalAlloc GetFileInformationByHandle SetEndOfFile WriteFile ReadFile GetUserDefaultLangID SetFilePointer GetFileSize GetLogicalDriveStringsW FindFirstChangeNotificationW FindCloseChangeNotification GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindNextChangeNotification GetCurrentThreadId GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetWindowsDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryW LoadLibraryExW FreeLibrary GlobalLock GlobalUnlock HeapAlloc GetProcessHeap HeapFree GetModuleHandleW GetProcAddress GetDiskFreeSpaceW GetDriveTypeW GetVolumeInformationW WideCharToMultiByte MultiByteToWideChar GetLastError GetTickCount GetSystemDefaultLangID GlobalSize OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot Sleep SetPriorityClass FindClose CopyFileW ExpandEnvironmentStringsW VirtualAlloc VirtualFree SetEvent InitializeCriticalSection LoadLibraryA GetStartupInfoA DeviceIoControl

Name

.text

Size

357KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

97KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-09_e5c38df835ee05ba6d059786989be2d1_elex_ramnit_wannacry

comctl32

comdlg32

mpr

gdi32

oleaut32

ole32

user32

advapi32

shell32

msvcrt

kernel32

generic