2026-11-01_8c01e1c484d40c91af8de196bed568c6_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_8c01e1c484d40c91af8de196bed568c6_elex_wannacry
Size 77KB
Sample261102-sr77rafe33
SHA256 b5fdc3bcf8e8f8e265da12f54c4c215bd7e864bfe7936ba544be34f5e4744236
MD5 8c01e1c484d40c91af8de196bed568c6
SHA1 bf85f872cc53453f57e4750ddc8641d893295eed
SHA512 e1ab9d0c4817226242a0d1cd5bfbe27e2a17fa1dd93531a50eec46dae297420c321024cf3cf5f23ac57397f2aeb6a45cbc0f21408c5ae3a5fdd328fb517a5a2c
SSDEEP 768:3l4WcB43zPNefTJ4fVVs0MhRQaFyT/WMv7ceGZDDyluUpFR:3q/i3zyJOVsrQai/vv7/8xUpFR
TLSH
T12B731946BDC184EEE4121071295A6BBE873785B50F1E77C2BF34EC8F8461374B826A9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_8c01e1c484d40c91af8de196bed568c6_elex_wannacry

File Explorer

2026-11-01_8c01e1c484d40c91af8de196bed568c6_elex_wannacry

.exe 77KB

2026-11-01_8c01e1c484d40c91af8de196bed568c6_elex_wannacry

IMPHASH cdca9ff682b55dce20f8dbb4fd854b59
SHA256 b5fdc3bcf8e8f8e265da12f54c4c215bd7e864bfe7936ba544be34f5e4744236
MD5 8c01e1c484d40c91af8de196bed568c6
SHA1 bf85f872cc53453f57e4750ddc8641d893295eed
SHA512 e1ab9d0c4817226242a0d1cd5bfbe27e2a17fa1dd93531a50eec46dae297420c321024cf3cf5f23ac57397f2aeb6a45cbc0f21408c5ae3a5fdd328fb517a5a2c
SSDEEP 768:3l4WcB43zPNefTJ4fVVs0MhRQaFyT/WMv7ceGZDDyluUpFR:3q/i3zyJOVsrQai/vv7/8xUpFR
TLSH
T12B731946BDC184EEE4121071295A6BBE873785B50F1E77C2BF34EC8F8461374B826A9D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29263

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord4837 ord4425 ord3597 ord1146 ord1168 ord324 ord4234 ord2379 ord755 ord470 ord3798 ord825 ord5280 ord4353 ord6374 ord5163 ord2385 ord5241 ord4407 ord1775 ord4078 ord6052 ord4710 ord4998 ord4853 ord4376 ord5265 ord1134 ord2514 ord641 ord815 ord561 ord3738 ord4424 ord4622 ord4080 ord3079 ord3825 ord3831 ord3830 ord2976 ord3081 ord2985 ord3262 ord3136 ord4465 ord3259 ord3147 ord2982 ord5714 ord5289 ord5307 ord4698 ord4079 ord2725 ord5302 ord5300 ord3346 ord2396 ord5199 ord1089 ord3922 ord5731 ord2512 ord2554 ord4486 ord6375 ord4274 ord4673 ord4627

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm _strrev rand __getmainargs _acmdln _XcptFilter _exit _onexit __dllonexit _except_handler3 strncmp exit sprintf __CxxFrameHandler strstr strcspn atoi strncpy

kernel32

EnumResourceNamesA FindResourceA LoadResource LockResource MoveFileExA OpenMutexA ReleaseMutex ExitProcess CreateThread WaitForSingleObject WriteFile CloseHandle CreateFileA EndUpdateResourceA lstrlenA GetTempPathA lstrcatA GetProcAddress WinExec LoadLibraryA Sleep GetComputerNameA GetLocaleInfoW GetModuleHandleA GetStartupInfoA TerminateProcess CreateProcessA ExitThread UpdateResourceA BeginUpdateResourceA GlobalFree ReadFile GlobalAlloc GetFileSize GetFileAttributesA lstrcpyA GetLastError CreateMutexA CopyFileA GetSystemDirectoryA GetTickCount lstrcpynA GlobalMemoryStatusEx

user32

EnableWindow IsIconic SendMessageA wsprintfA LoadIconA DrawIcon GetClientRect GetSystemMetrics

advapi32

RegSetValueExA StartServiceCtrlDispatcherA RegisterServiceCtrlHandlerA SetServiceStatus RegOpenKeyExA RegQueryValueExA RegCloseKey OpenSCManagerA OpenServiceA DeleteService RegOpenKeyA StartServiceA CreateServiceA CloseServiceHandle

ws2_32

WSAStartup send select __WSAFDIsSet recv setsockopt WSAIoctl htons socket connect closesocket gethostbyname inet_addr sendto WSASocketA htonl

winmm

timeGetTime

wininet

InternetOpenA InternetOpenUrlA InternetReadFile InternetCloseHandle

Name

2z90A

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

02N

Size

1024B

Virtual Size

848B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_8c01e1c484d40c91af8de196bed568c6_elex_wannacry

mfc42

msvcrt

kernel32

user32

advapi32

ws2_32

winmm

wininet

generic