2026-11-11_05bc5f39174411949b0e40f5fd867a31_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-11_05bc5f39174411949b0e40f5fd867a31_elex_wannacry
Size 629KB
Sample261113-wvnt3aew21
SHA256 2c24d3d685e671071fdaa41af81e46008c270d216cfc72553df0f5c8d0ed3c0f
MD5 05bc5f39174411949b0e40f5fd867a31
SHA1 29d55f6baab0bd7fdfeaebac1a0032643539770f
SHA512 a1711e64f96024859f8f9672e1d0ed18f6f1aacd63a732f40131073a298cb7a6745af06d4b654991d69c58c191de05ce32d9ca7d0709bb12f6a030ec78f52fb0
SSDEEP 6144:T4sZBOZdjEYTPXMhaMP/kFTA7OAcBOZdjEYF:TnANL8oq/kFTsOkNF
TLSH
T1CCD41D3406718E04D463C3B42C950D955D6A1EF8CDF86796C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-11_05bc5f39174411949b0e40f5fd867a31_elex_wannacry

File Explorer

2026-11-11_05bc5f39174411949b0e40f5fd867a31_elex_wannacry

.exe 629KB

2026-11-11_05bc5f39174411949b0e40f5fd867a31_elex_wannacry

IMPHASH 5331ce77aa0d7f10da3e13b1a5022f58
SHA256 2c24d3d685e671071fdaa41af81e46008c270d216cfc72553df0f5c8d0ed3c0f
MD5 05bc5f39174411949b0e40f5fd867a31
SHA1 29d55f6baab0bd7fdfeaebac1a0032643539770f
SHA512 a1711e64f96024859f8f9672e1d0ed18f6f1aacd63a732f40131073a298cb7a6745af06d4b654991d69c58c191de05ce32d9ca7d0709bb12f6a030ec78f52fb0
SSDEEP 6144:T4sZBOZdjEYTPXMhaMP/kFTA7OAcBOZdjEYF:TnANL8oq/kFTsOkNF
TLSH
T1CCD41D3406718E04D463C3B42C950D955D6A1EF8CDF86796C707A0AE29BD7FA32AD3AC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

mfc42

ord5778 ord5465 ord3511 ord5194 ord268 ord350 ord533 ord938 ord833 ord919 ord3810 ord5934 ord2438 ord1644 ord6407 ord2584 ord3654 ord5572 ord5641 ord5592 ord1081 ord911 ord4187 ord698 ord415 ord396 ord715 ord539 ord542 ord6569 ord802 ord1997 ord1567 ord798 ord964 ord3663 ord3616 ord3127 ord5651 ord2919 ord6282 ord6283 ord6874 ord923 ord354 ord5186 ord665 ord5773 ord5442 ord6385 ord1979 ord3811 ord551 ord2915 ord940 ord823 ord922 ord926 ord924 ord2614 ord860 ord5683 ord4277 ord858 ord4129 ord941 ord4202 ord2764 ord2818 ord535 ord537 ord1105 ord800 ord825 ord540 ord861 ord4220

msvcrt

wcslen wcscmp _controlfp __set_app_type strtol __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ ?terminate@@YAXXZ strncpy time srand wcsstr _mbscmp _access atoi _mbsnbcpy rand _mbsicmp __CxxFrameHandler _CxxThrowException _except_handler3 __p__fmode

kernel32

LocalAlloc OutputDebugStringA CreateMutexA LocalFree GetSystemDirectoryA CreateSemaphoreA CopyFileA ReleaseSemaphore GetVersionExA SetFileAttributesA DeleteFileA ExitProcess GetLastError GetModuleHandleA CreateToolhelp32Snapshot Process32First OpenProcess GetPriorityClass Process32Next GetWindowsDirectoryA TerminateProcess Sleep GetModuleFileNameA SetEvent WaitForSingleObject CloseHandle CreateEventA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA FreeLibrary OpenEventA LockResource MultiByteToWideChar LoadLibraryExA EnumResourceNamesA EnumResourceLanguagesA FindResourceExA SizeofResource LoadResource GetStartupInfoA

user32

CreateMenu wsprintfA

advapi32

RegSetValueExA RegOpenKeyExA RegDeleteValueA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize CoTaskMemFree CoInitialize CoCreateInstance

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-11_05bc5f39174411949b0e40f5fd867a31_elex_wannacry

psapi

version

mfc42

msvcrt

kernel32

user32

advapi32

shell32

ole32

generic