2026-10-26_9186fef0c28928626db9df5c05c2e5fd_elex_wannacry

General

Target
2026-10-26_9186fef0c28928626db9df5c05c2e5fd_elex_wannacry
Size 30KB
Sample261027-nzpyxsdx2n
SHA256 fa6a4857627b5c6271fa46b036c6e9b236c5775be78f12c5cedb41a103a9c87c
MD5 9186fef0c28928626db9df5c05c2e5fd
SHA1 58446267d112f1360863a91037f20a55320150dd
SHA512 55714472ba0987042443b74df09322cfc9c63880be0a772b421045790755d517b139bc0c8198e12a53b0af475517915128bb6b408fb597aafe400dee9dd39d39
SSDEEP 384:q/JYSrFQjGdzHNHP1SYpMYUzMk9hBcecy:g/3d91SN/zoy
TLSH
T125D283E2E74148F8D8039EBC84367943A143A15E5E2A9A5D19D27E067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_9186fef0c28928626db9df5c05c2e5fd_elex_wannacry

SHA256 fa6a4857627b5c6271fa46b036c6e9b236c5775be78f12c5cedb41a103a9c87c
MD5 9186fef0c28928626db9df5c05c2e5fd
SHA1 58446267d112f1360863a91037f20a55320150dd
SHA512 55714472ba0987042443b74df09322cfc9c63880be0a772b421045790755d517b139bc0c8198e12a53b0af475517915128bb6b408fb597aafe400dee9dd39d39
SSDEEP 384:q/JYSrFQjGdzHNHP1SYpMYUzMk9hBcecy:g/3d91SN/zoy
TLSH
T125D283E2E74148F8D8039EBC84367943A143A15E5E2A9A5D19D27E067F73393E07398F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

24786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths