2026-09-22_d4ab9734866813efb0a11f69c46c080b_elex_wannacry

General

Target
2026-09-22_d4ab9734866813efb0a11f69c46c080b_elex_wannacry
Size 30KB
Sample260922-vpsemazblc
SHA256 1b9cb36fd4ec3e3d889ed36bd09561550ef4aedbf060ba65c72e32d37ccfa294
MD5 d4ab9734866813efb0a11f69c46c080b
SHA1 4a509182f25d5e95c6510dece11ddddc3e843bf9
SHA512 6a2ab789ea2a9b6223aac8e9b99cd0c8deec3bfd0852b755b6a74e59a2e68e888b452d46f472fcf872c487f7b25f03ed88fc34b55f647590eb58be459b7b2912
SSDEEP 384:q/JYSrFQjG1zHNHP1F5YpMYUzMk9hBcecy:g/3191F5N/zoy
TLSH
T125D274E2E74148A8D8039EBC84367943A143A15D9E2A9A5D19D27E067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-22_d4ab9734866813efb0a11f69c46c080b_elex_wannacry

SHA256 1b9cb36fd4ec3e3d889ed36bd09561550ef4aedbf060ba65c72e32d37ccfa294
MD5 d4ab9734866813efb0a11f69c46c080b
SHA1 4a509182f25d5e95c6510dece11ddddc3e843bf9
SHA512 6a2ab789ea2a9b6223aac8e9b99cd0c8deec3bfd0852b755b6a74e59a2e68e888b452d46f472fcf872c487f7b25f03ed88fc34b55f647590eb58be459b7b2912
SSDEEP 384:q/JYSrFQjG1zHNHP1F5YpMYUzMk9hBcecy:g/3191F5N/zoy
TLSH
T125D274E2E74148A8D8039EBC84367943A143A15D9E2A9A5D19D27E067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

24786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths