2024-01-29_eee3ce77aa6f2b22b120025ab7af1525_ryuk

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-29_eee3ce77aa6f2b22b120025ab7af1525_ryuk
Size

28.1MB
MD5

eee3ce77aa6f2b22b120025ab7af1525
SHA1

1e334582cc50e79e9601588a9d7da976109205c8
SHA256

bbd90f83195caeba6a4ed7f3437b70035ca081c04e048f38ecdcf9608a613516
SHA512

7c28fad1fb0e6ae8011d4911523c21e53584e900f1d97ddec3e04251b0665be009ba9b37e08f22a62b76eb3f27ec61623d079160451586cace454acb58b51bf3
SSDEEP

786432:RZlE9QZM2jpdimwp6T8Y0q8JbBZsafPYhv:RE9Q6+hKJ1ZXQv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-29_eee3ce77aa6f2b22b120025ab7af1525_ryuk

Files

2024-01-29_eee3ce77aa6f2b22b120025ab7af1525_ryuk
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nexus
Size: - Virtual size: 44.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.loadcon
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.boot
Size: 26.8MB - Virtual size: 26.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 36B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 236KB - Virtual size: 235KB

.data Size: 9KB - Virtual size: 216KB

.pdata Size: 10KB - Virtual size: 9KB

.00cfg Size: 512B - Virtual size: 56B

.gxfg Size: 5KB - Virtual size: 5KB

.tls Size: 512B - Virtual size: 177B

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 2KB - Virtual size: 2KB

.idata Size: 1024B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.nexus Size: - Virtual size: 44.3MB

.loadcon Size: 512B - Virtual size: 4KB

.boot Size: 26.8MB - Virtual size: 26.8MB

.init Size: 512B - Virtual size: 512B

.reloc Size: 36B - Virtual size: 4KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 236KB - Virtual size: 235KB

.data
Size: 9KB - Virtual size: 216KB

.pdata
Size: 10KB - Virtual size: 9KB

.00cfg
Size: 512B - Virtual size: 56B

.gxfg
Size: 5KB - Virtual size: 5KB

.tls
Size: 512B - Virtual size: 177B

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 2KB - Virtual size: 2KB

.idata
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.nexus
Size: - Virtual size: 44.3MB

.loadcon
Size: 512B - Virtual size: 4KB

.boot
Size: 26.8MB - Virtual size: 26.8MB

.init
Size: 512B - Virtual size: 512B

.reloc
Size: 36B - Virtual size: 4KB