2026-10-25_79f00ac65d19dccdf252324281de09d3_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_79f00ac65d19dccdf252324281de09d3_elex_wannacry
Size 4.5MB
Sample261026-258vwacb82
SHA256 16d4abc059028a667a6adcf2ef3eb33fba1dfe70f5cbc6c537f73d44dd9a6a1d
MD5 79f00ac65d19dccdf252324281de09d3
SHA1 0bd9b9d1bbeee504979b52ce5fc8ee2322e3256b
SHA512 b90a083c53d8ab3d0cf7079969faddfa6e92601dde01025108913a2f356c57e86eb1f14a91f286e5490d2c527ed6230bc95bcb8e100e25c068a632debf3cb9ad
SSDEEP 98304:yKkL0xahFUUagRyNa6jboRin5y41agj60xnz+F:fkfUUagRqLo4MgH0
TLSH
T11D268D23E2878756D80DE3B199F9233925B8E611DB46C7C32389C465DDC32ECAB1B674
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_79f00ac65d19dccdf252324281de09d3_elex_wannacry

File Explorer

2026-10-25_79f00ac65d19dccdf252324281de09d3_elex_wannacry

.exe 4.5MB

2026-10-25_79f00ac65d19dccdf252324281de09d3_elex_wannacry

IMPHASH ce1d53f85791e081bd34486ca8696a30
SHA256 16d4abc059028a667a6adcf2ef3eb33fba1dfe70f5cbc6c537f73d44dd9a6a1d
MD5 79f00ac65d19dccdf252324281de09d3
SHA1 0bd9b9d1bbeee504979b52ce5fc8ee2322e3256b
SHA512 b90a083c53d8ab3d0cf7079969faddfa6e92601dde01025108913a2f356c57e86eb1f14a91f286e5490d2c527ed6230bc95bcb8e100e25c068a632debf3cb9ad
SSDEEP 98304:yKkL0xahFUUagRyNa6jboRin5y41agj60xnz+F:fkfUUagRqLo4MgH0
TLSH
T11D268D23E2878756D80DE3B199F9233925B8E611DB46C7C32389C465DDC32ECAB1B674
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1564832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

timeGetTime

kernel32

Sleep DeleteFileA GetProcAddress LoadLibraryA GetStartupInfoA FreeLibrary CreateProcessA CreateEventA ResetEvent WaitForSingleObject SetEvent GetFullPathNameA GetModuleHandleA LeaveCriticalSection CreateThread DeleteCriticalSection EnterCriticalSection FindClose FindFirstFileA SetFileTime MoveFileA SetFileAttributesA GetFileAttributesA GetFileInformationByHandle SetFilePointer WriteFile ReadFile FlushFileBuffers CloseHandle GetCurrentProcess DuplicateHandle CreateFileA QueryPerformanceFrequency QueryPerformanceCounter GetTickCount SetErrorMode InitializeCriticalSection OutputDebugStringA DosDateTimeToFileTime GetVersion RemoveDirectoryA GetCurrentDirectoryA FindNextFileA GetDiskFreeSpaceA CreateDirectoryA GetLastError SetCurrentDirectoryA MultiByteToWideChar WideCharToMultiByte LocalFree GetDriveTypeA GetModuleFileNameA GetACP InterlockedDecrement LocalFileTimeToFileTime lstrlenA lstrlenW

user32

GetDlgItem DispatchMessageA GetForegroundWindow CallNextHookEx RegisterClassExA DefWindowProcA ClipCursor GetAsyncKeyState SetWindowsHookExA UnhookWindowsHookEx SystemParametersInfoA SetCursor CreateWindowExA SetForegroundWindow BringWindowToTop ShowWindow GetLastActivePopup IsIconic LoadIconA GetWindowThreadProcessId PostQuitMessage MessageBoxA GetDesktopWindow CreateDialogParamA SetWindowTextA DestroyWindow GetSystemMetrics MoveWindow IsWindow PeekMessageA TranslateMessage GetMessageA FindWindowA UpdateWindow

gdi32

GetStockObject TranslateCharsetInfo

oleaut32

SysFreeString SysAllocString VariantInit CreateErrorInfo VariantChangeType SetErrorInfo GetErrorInfo VariantClear

bugslay

ord21 ord13 ord12 ord17 ord14 ord16

msvcp60

?move@?$char_traits@D@std@@SAPADPADPBDI@Z

msvcrt

strcoll _exit memcmp _ftol atoi wcslen pow sin cos __RTDynamicCast ?name@type_info@@QBEPBDXZ __RTtypeid strcpy _stricmp _control87 memcpy ceil rand sscanf abs sqrt strcmp fprintf _iob exit longjmp _setjmp3 fclose freopen ungetc fgetc fopen sprintf fputs free malloc strcat calloc ??1exception@@UAE@XZ _isctype __mb_cur_max strtod vsprintf strcspn memset fread ??0exception@@QAE@XZ strncmp clock time srand _strlwr strchr strstr _strnicmp atof realloc qsort localtime strtok _itoa log10 toupper _access div atan __dllonexit _onexit ??1type_info@@UAE@XZ _XcptFilter _acmdln __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 ?terminate@@YAXXZ _controlfp strncpy ??0exception@@QAE@ABV0@@Z memmove _CxxThrowException strlen __CxxFrameHandler ??2@YAPAXI@Z _pctype fabs _purecall tolower

wsock32

inet_ntoa connect __WSAFDIsSet ioctlsocket inet_addr WSAStartup WSACleanup shutdown setsockopt ntohs getsockname bind htonl gethostbyname htons WSAGetLastError closesocket recv send recvfrom sendto select socket

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

advapi32

RegCloseKey RegSetValueExA RegCreateKeyExA RegQueryValueExA RegOpenKeyExA

ole32

CoCreateGuid

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_79f00ac65d19dccdf252324281de09d3_elex_wannacry

winmm

kernel32

user32

gdi32

oleaut32

bugslay

msvcp60

msvcrt

wsock32

version

advapi32

ole32

generic