2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry
Size 539KB
Sample261012-22hvaafa59
SHA256 5ba4699ba1e570351718b58ad023fe6df045df093717bccb9824a30aab0e4d3d
MD5 44de4d5a48375cc9bc56c5736be26883
SHA1 4f50933665e4360b9057badf9ac8a5a126a06082
SHA512 d09004696c69845b9ba761b6e67974605c4e4fa7d983814a68da607e28c60ac9e5efa18ce50f4da61d738c77cc473527e97ab120dad558a1d3206db6daf04a1b
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBNb9qu7:OGruf026ZlmR70Y/k9VS+LPMRLbc
TLSH
T1B0C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry

File Explorer

2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry

.exe 539KB

2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry

IMPHASH 87ae18e92c07049d6dd3efaa3c9d54d0
SHA256 5ba4699ba1e570351718b58ad023fe6df045df093717bccb9824a30aab0e4d3d
MD5 44de4d5a48375cc9bc56c5736be26883
SHA1 4f50933665e4360b9057badf9ac8a5a126a06082
SHA512 d09004696c69845b9ba761b6e67974605c4e4fa7d983814a68da607e28c60ac9e5efa18ce50f4da61d738c77cc473527e97ab120dad558a1d3206db6daf04a1b
SSDEEP 6144:OGkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBNb9qu7:OGruf026ZlmR70Y/k9VS+LPMRLbc
TLSH
T1B0C4491639FCC73BE3D25530CE6CFB90B0F5B9684F21489736D4191C2A76992E31AA2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

512000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_ReplaceIcon InitCommonControlsEx CreateToolbarEx CreateStatusWindowW ord17 ImageList_GetImageCount ImageList_AddMasked ImageList_Create ImageList_Destroy PropertySheetW

comdlg32

CommDlgExtendedError GetOpenFileNameW

mpr

WNetOpenEnumW WNetEnumResourceW WNetGetResourceParentW WNetGetResourceInformationW WNetAddConnection2W WNetCloseEnum

gdi32

DeleteObject

oleaut32

SysStringByteLen VariantCopy VariantClear SysAllocString SysAllocStringLen SysStringLen SysFreeString

ole32

CoTaskMemFree OleUninitialize OleInitialize CoTaskMemAlloc RevokeDragDrop DoDragDrop CoCreateInstance ReleaseStgMedium CoInitialize RegisterDragDrop CoUninitialize

user32

RemoveMenu CheckMenuRadioItem CheckMenuItem AppendMenuW GetMenu LoadMenuW SetMenu DrawMenuBar GetSubMenu EnableMenuItem IsDlgButtonChecked CheckDlgButton CheckRadioButton IsZoomed GetClientRect ReleaseCapture SetCapture GetCapture LoadIconW GetWindowPlacement SetWindowPlacement LoadAcceleratorsW GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW PostQuitMessage SetDlgItemTextW GetFocus GetKeyState InvalidateRect PostMessageW SetWindowTextW EndDialog EnableWindow DestroyWindow SetFocus CreatePopupMenu DestroyMenu LoadBitmapW MessageBoxW DefWindowProcW GetClassInfoW LoadCursorW RegisterClassW CallWindowProcW CreateWindowExW DialogBoxParamW SetWindowLongW GetWindowLongW ShowWindow MoveWindow ScreenToClient GetDlgItem GetWindowRect MapDialogRect SystemParametersInfoW GetDialogBaseUnits GetWindowTextLengthW GetWindowTextW SendMessageW LoadStringW InsertMenuItemW SetMenuItemInfoW GetMenuItemInfoW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard CharUpperW MapVirtualKeyW SetTimer UpdateWindow RegisterClipboardFormatW WindowFromPoint ChildWindowFromPointEx IsWindowEnabled GetCursorPos TrackPopupMenuEx GetMenuItemCount ClientToScreen SetCursor KillTimer DestroyIcon GetParent

advapi32

AdjustTokenPrivileges RegOpenKeyExA RegQueryValueExA GetFileSecurityW SetFileSecurityW RegQueryValueExW RegSetValueExW RegEnumKeyExW RegDeleteKeyW RegCloseKey LookupAccountNameW LsaOpenPolicy GetUserNameW LsaClose LsaAddAccountRights LookupPrivilegeValueW OpenProcessToken RegCreateKeyExW RegOpenKeyExW

shell32

SHGetFileInfoW SHBrowseForFolderW ShellExecuteExW DragQueryFileW DragFinish SHGetMalloc SHGetDesktopFolder SHFileOperationW SHGetSpecialFolderLocation ShellExecuteW ExtractIconExW SHChangeNotify SHGetPathFromIDListW

msvcrt

_adjust_fdiv __p__commode __p__fmode __set_app_type _initterm __setusermatherr __getmainargs _acmdln exit _XcptFilter _exit _onexit __dllonexit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _except_handler3 _beginthreadex wcscat _wcsicmp __CxxFrameHandler wcscmp memcpy memmove _CxxThrowException _controlfp strcmp wcsstr malloc free srand rand memset wcslen memcmp strlen _purecall

kernel32

GetCompressedFileSizeW GetCommandLineW GetVersionExW InterlockedDecrement InterlockedIncrement AreFileApisANSI EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FileTimeToLocalFileTime CreateEventW CreateFileMappingW MapViewOfFile UnmapViewOfFile WaitForSingleObject WaitForMultipleObjects GetStdHandle GetSystemTimeAsFileTime FileTimeToDosDateTime GlobalMemoryStatus lstrlenW FileTimeToSystemTime CompareFileTime CreateProcessW GetCurrentProcess GlobalFree GlobalAlloc GetFileInformationByHandle SetEndOfFile WriteFile ReadFile GetUserDefaultLangID SetFilePointer GetFileSize GetLogicalDriveStringsW FindFirstChangeNotificationW FindCloseChangeNotification GetFileAttributesW GetModuleHandleA FindNextFileW FindFirstFileW FindNextChangeNotification GetCurrentThreadId GetCurrentProcessId GetTempPathW GetCurrentDirectoryW SetLastError DeleteFileW CreateDirectoryW MoveFileW RemoveDirectoryW SetFileAttributesW CreateFileW SetFileTime CloseHandle GetWindowsDirectoryW FormatMessageW LocalFree GetModuleFileNameW LoadLibraryW LoadLibraryExW FreeLibrary GlobalLock GlobalUnlock HeapAlloc GetProcessHeap HeapFree GetModuleHandleW GetProcAddress GetDiskFreeSpaceW GetDriveTypeW GetVolumeInformationW WideCharToMultiByte MultiByteToWideChar GetLastError GetTickCount GetSystemDefaultLangID GlobalSize OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot Sleep SetPriorityClass FindClose CopyFileW ExpandEnvironmentStringsW VirtualAlloc VirtualFree SetEvent InitializeCriticalSection LoadLibraryA GetStartupInfoA DeviceIoControl

Name

.text

Size

357KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sxdata

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rmnet

Size

56KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-11_44de4d5a48375cc9bc56c5736be26883_elex_ramnit_wannacry

comctl32

comdlg32

mpr

gdi32

oleaut32

ole32

user32

advapi32

shell32

msvcrt

kernel32

generic