2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry
Size 539KB
Sample260925-egkrtayeme
SHA256 488276d7fea88fd2cd48bdb6261127bf5c8e87049c679c0b8174d5f2cc8454ea
MD5 987e3341a984c6a5982f82ecd38addc4
SHA1 4a8aea0fb8a36de1ae7d272667cb6f6d6cde1646
SHA512 623f3a2a566355cd86178443095581670fcfd441a290bace637ce56b71c9a67aff96a31aa61a4c0967432b48a8ac6a96cd10c9c7ca9a5c86d98c215c8c10df8e
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBaxlvqG1:OGruf026ZlmR70Y/k9VS+LPMRqvqG1
TLSH
T170C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry

File Explorer

2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry

.exe 539KB

2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry

IMPHASH 87ae18e92c07049d6dd3efaa3c9d54d0
SHA256 488276d7fea88fd2cd48bdb6261127bf5c8e87049c679c0b8174d5f2cc8454ea
MD5 987e3341a984c6a5982f82ecd38addc4
SHA1 4a8aea0fb8a36de1ae7d272667cb6f6d6cde1646
SHA512 623f3a2a566355cd86178443095581670fcfd441a290bace637ce56b71c9a67aff96a31aa61a4c0967432b48a8ac6a96cd10c9c7ca9a5c86d98c215c8c10df8e
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBaxlvqG1:OGruf026ZlmR70Y/k9VS+LPMRqvqG1
TLSH
T170C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

512000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_ReplaceIcon InitCommonControlsEx CreateToolbarEx CreateStatusWindowW ord17 ImageList_GetImageCount ImageList_AddMasked ImageList_Create ImageList_Destroy PropertySheetW

comdlg32

CommDlgExtendedError GetOpenFileNameW

mpr

WNetOpenEnumW WNetEnumResourceW WNetGetResourceParentW WNetGetResourceInformationW WNetAddConnection2W WNetCloseEnum

gdi32

DeleteObject

oleaut32

SysStringByteLen VariantCopy VariantClear SysAllocString SysAllocStringLen SysStringLen SysFreeString

ole32

CoTaskMemFree OleUninitialize OleInitialize CoTaskMemAlloc RevokeDragDrop DoDragDrop CoCreateInstance ReleaseStgMedium CoInitialize RegisterDragDrop CoUninitialize

user32

RemoveMenu CheckMenuRadioItem CheckMenuItem AppendMenuW GetMenu LoadMenuW SetMenu DrawMenuBar GetSubMenu EnableMenuItem IsDlgButtonChecked CheckDlgButton CheckRadioButton IsZoomed GetClientRect ReleaseCapture SetCapture GetCapture LoadIconW GetWindowPlacement SetWindowPlacement LoadAcceleratorsW GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW PostQuitMessage SetDlgItemTextW GetFocus GetKeyState InvalidateRect PostMessageW SetWindowTextW EndDialog EnableWindow DestroyWindow SetFocus CreatePopupMenu DestroyMenu LoadBitmapW MessageBoxW DefWindowProcW GetClassInfoW LoadCursorW RegisterClassW CallWindowProcW CreateWindowExW DialogBoxParamW SetWindowLongW GetWindowLongW ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect SystemParametersInfoW GetDialogBaseUnits GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW InsertMenuItemW SetMenuItemInfoW GetMenuItemInfoW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW MapVirtualKeyW SetTimer UpdateWindow RegisterClipboardFormatW WindowFromPoint ChildWindowFromPointEx IsWindowEnabled GetCursorPos TrackPopupMenuEx GetMenuItemCount ClientToScreen SetCursor KillTimer DestroyIcon GetParent

advapi32

AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA GetFileSecurityW SetFileSecurityW RegQueryValueExW RegSetValueExW RegEnumKeyExW RegDeleteKeyW RegCloseKey LookupAccountNameW LsaOpenPolicy GetUserNameW LsaClose LsaAddAccountRights LookupPrivilegeValueW OpenProcessToken RegCreateKeyExW RegOpenKeyExW

shell32

SHGetFileInfoW SHBrowseForFolderW ShellExecuteExW DragQueryFileW DragFinish SHGetMalloc SHGetDesktopFolder SHFileOperationW SHGetSpecialFolderLocation ShellExecuteW ExtractIconExW SHChangeNotify SHGetPathFromIDListW

msvcrt

_adjust_fdiv __p__commode __p__fmode __set_app_type _initterm __setusermatherr __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex wcscat _wcsicmp __CxxFrameHandler wcscmp memcpy memmove _CxxThrowException _controlfp strcmp wcsstr malloc free srand rand memset wcslen memcmp strlen _purecall

kernel32

GetCompressedFileSizeW GetCommandLineW GetVersionExW InterlockedDecrement InterlockedIncrement AreFileApisANSI EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FileTimeToLocalFileTime CreateEventW CreateFileMappingW MapViewOfFile UnmapViewOfFile WaitForSingleObject WaitForMultipleObjects GetStdHandle GetSystemTimeAsFileTime FileTimeToDosDateTime GlobalMemoryStatus lstrlenW FileTimeToSystemTime CompareFileTime CreateProcessW GetCurrentProcess GlobalFree GlobalAlloc GetFileInformationByHandle SetEndOfFile WriteFile ReadFile GetUserDefaultLangID SetFilePointer GetFileSize GetLogicalDriveStringsW FindFirstChangeNotificationW FindCloseChangeNotification GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindNextChangeNotification GetCurrentThreadId GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetWindowsDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryW LoadLibraryExW FreeLibrary GlobalLock GlobalUnlock HeapAlloc GetProcessHeap HeapFree GetModuleHandleW GetProcAddress GetDiskFreeSpaceW GetDriveTypeW GetVolumeInformationW WideCharToMultiByte MultiByteToWideChar GetLastError GetTickCount GetSystemDefaultLangID GlobalSize OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot Sleep SetPriorityClass FindClose CopyFileW ExpandEnvironmentStringsW VirtualAlloc VirtualFree SetEvent InitializeCriticalSection LoadLibraryA GetStartupInfoA DeviceIoControl

Name

.text

Size

357KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rmnet

Size

56KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_987e3341a984c6a5982f82ecd38addc4_elex_ramnit_wannacry

comctl32

comdlg32

mpr

gdi32

oleaut32

ole32

user32

advapi32

shell32

msvcrt

kernel32

generic