2026-09-29_627d20af7eb4b0fbe442784a5b0244b1_elex_wannacry

General

Target
2026-09-29_627d20af7eb4b0fbe442784a5b0244b1_elex_wannacry
Size 1.7MB
Sample260929-3pcceavs7j
SHA256 73d6116be04c194a4b0a8240f0f8adac977d9ca4a962e6a77e388422b22be45f
MD5 627d20af7eb4b0fbe442784a5b0244b1
SHA1 3c70eeef4ff8d47611f2be80aca3ac698f9ad653
SHA512 2bbd0e05e5f865368146a9a2c0f9cf1a33ccc7564ae89fcf4c1823674971a46c98c6968fb4491f5509c61578bfccd6bae3e9e55e57a68f8f32ad94186a1ea83c
SSDEEP 24576:pFAiqN/BQn/1J7sMJqWRPfmyOKSRsRAqKNRn4ufrwC2eM8for+o5dRfor+o/PO:+8vsfyMyCLfor+o5/for+onO
TLSH
T137854B32AEAE10E2C5905270CDD973FDE667AD957E2587976320FA1DF831380A43E11B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables with modified PE resources using the unpaid version of Resource Tuner 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_PE_ResourceTuner

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_627d20af7eb4b0fbe442784a5b0244b1_elex_wannacry

SHA256 73d6116be04c194a4b0a8240f0f8adac977d9ca4a962e6a77e388422b22be45f
MD5 627d20af7eb4b0fbe442784a5b0244b1
SHA1 3c70eeef4ff8d47611f2be80aca3ac698f9ad653
SHA512 2bbd0e05e5f865368146a9a2c0f9cf1a33ccc7564ae89fcf4c1823674971a46c98c6968fb4491f5509c61578bfccd6bae3e9e55e57a68f8f32ad94186a1ea83c
SSDEEP 24576:pFAiqN/BQn/1J7sMJqWRPfmyOKSRsRAqKNRn4ufrwC2eM8for+o5dRfor+o/PO:+8vsfyMyCLfor+o5/for+onO
TLSH
T137854B32AEAE10E2C5905270CDD973FDE667AD957E2587976320FA1DF831380A43E11B
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables with modified PE resources using the unpaid version of Resource Tuner
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

208370

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths