Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_b48a538579dd13f73df9e1f554aa7d53_ryuk.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_b48a538579dd13f73df9e1f554aa7d53_ryuk.exe
Resource
win10v2004-20231215-en
Target
2024-01-25_b48a538579dd13f73df9e1f554aa7d53_ryuk
Size
208KB
MD5
b48a538579dd13f73df9e1f554aa7d53
SHA1
e6519f414c8a9516dfb1045a1473941f8040ffcc
SHA256
8c138e5dce7e8d1d83b8994b6982220dbc7acf2228c1f42b9762d64ca5217580
SHA512
191b7bfb5ce4a5e080c99e8264a3071e05dccd4da23d58f0977cc31c3ee87807cc562052f8f2c0883552a1310d3ffba3e52866a879bcfccc1f9afd168d72f9ff
SSDEEP
3072:kVgphnbuN93b72bAbWTezjOjX/2VDiFJdhDQw7MRTKefMw7JZxb3aS6nu/akOEK:jphnbub3b72bAr+jP2Voa7JZBV6nzEK
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IsDebuggerPresent
RaiseException
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
HeapAlloc
HeapFree
GetProcessHeap
GetModuleFileNameW
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetACP
SetLastError
GetStringTypeW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
DeleteCriticalSection
SetStdHandle
GetFileType
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
EncodePointer
CreateDirectoryW
SizeofResource
RemoveDirectoryW
WaitForSingleObject
GetSystemDirectoryW
SetFileAttributesW
Sleep
LockResource
DeleteFileW
LoadResource
FindResourceW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateProcessW
GetSystemWindowsDirectoryW
GetExitCodeProcess
HeapSetInformation
GetEnvironmentVariableW
GetFileAttributesW
OpenProcess
SetEvent
FormatMessageW
FreeLibrary
GetCurrentProcessId
CloseHandle
Process32FirstW
Process32NextW
GetLastError
CreateToolhelp32Snapshot
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
CoCreateGuid
RtlUnwindEx
RtlPcToFileHeader
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RegCloseKey
GetTokenInformation
RegQueryValueExW
AddAccessAllowedAce
GetLengthSid
RegDeleteValueW
RegOpenKeyExW
InitializeAcl
InitializeSecurityDescriptor
FreeSid
OpenProcessToken
RegSetValueExW
IsValidSid
CopySid
RegCreateKeyExW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
TraceMessage
UuidCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ