2026-11-03_748bbe9e5942ce8179743a4c9d83ee9e_elex_wannacry

General

Target
2026-11-03_748bbe9e5942ce8179743a4c9d83ee9e_elex_wannacry
Size 516KB
Sample261104-vdedmabx3v
SHA256 20d3bdfc9501200c6faa5de939ea68f0563a45fd67b1639f196ba72a1980da19
MD5 748bbe9e5942ce8179743a4c9d83ee9e
SHA1 16182081e3f837524d90d4eff3fd742d7ee2a919
SHA512 c68b327d2cf3635e2413caa65ee227b8ba998925c088f30564100283046fa4bb6c637c28246cf547a43533ccc4f683740b2e3fbbeec15909f36ded96ef7d11a2
SSDEEP 12288:TDP6ys+NgzZhkDjhJrKbLSQrQN9QLUwRIDqvWkphyQkG1:T3BNUfkbenSILUwRAqk
TLSH
T1C0B413725B490959F026D8B219338EB6A771FC714D414D072B87BF8E1D326467BA2B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_748bbe9e5942ce8179743a4c9d83ee9e_elex_wannacry

File Explorer

2026-11-03_748bbe9e5942ce8179743a4c9d83ee9e_elex_wannacry

.exe 516KB

2026-11-03_748bbe9e5942ce8179743a4c9d83ee9e_elex_wannacry

IMPHASH 69ed1717b651153802b6887a29e2fd3a
SHA256 20d3bdfc9501200c6faa5de939ea68f0563a45fd67b1639f196ba72a1980da19
MD5 748bbe9e5942ce8179743a4c9d83ee9e
SHA1 16182081e3f837524d90d4eff3fd742d7ee2a919
SHA512 c68b327d2cf3635e2413caa65ee227b8ba998925c088f30564100283046fa4bb6c637c28246cf547a43533ccc4f683740b2e3fbbeec15909f36ded96ef7d11a2
SSDEEP 12288:TDP6ys+NgzZhkDjhJrKbLSQrQN9QLUwRIDqvWkphyQkG1:T3BNUfkbenSILUwRAqk
TLSH
T1C0B413725B490959F026D8B219338EB6A771FC714D414D072B87BF8E1D326467BA2B0F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

523024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 ord594 __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaBoolVarNull _CIsin ord631 ord632 __vbaChkstk __vbaFileClose ord528 __vbaStrCmp __vbaPutOwner3 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRecUniToAnsi ord600 _CIsqrt __vbaVarAnd __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaInStrVar __vbaVarCat ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaVar2Vec __vbaNew2 ord648 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 ord612 __vbaVarDup __vbaStrToAnsi __vbaFpI2 ord617 __vbaRecDestructAnsi _CIatan __vbaStrMove _allmul _CItan __vbaFPInt _CIexp ord580 __vbaFreeStr ord581 __vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaFreeVarList _adj_fdiv_m64 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 ord594 __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaBoolVarNull _CIsin ord631 ord632 __vbaChkstk __vbaFileClose ord528 __vbaStrCmp __vbaPutOwner3 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaFixstrConstruct __vbaRecUniToAnsi ord600 _CIsqrt __vbaVarAnd __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaInStrVar __vbaVarCat ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaVar2Vec __vbaNew2 ord648 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord610 ord612 __vbaVarDup __vbaStrToAnsi __vbaFpI2 ord617 __vbaRecDestructAnsi _CIatan __vbaStrMove _allmul _CItan __vbaFPInt _CIexp ord580 __vbaFreeStr ord581

kernel32

CloseHandle EnterCriticalSection CloseHandle CloseHandle VirtualProtect CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle CloseHandle LoadLibraryA GetProcAddress VirtualAlloc VirtualFree LoadLibraryA GetProcAddress

ole32

IIDFromString

ntdll

LdrGetDllHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_748bbe9e5942ce8179743a4c9d83ee9e_elex_wannacry

msvbvm60

kernel32

ole32

ntdll

generic