Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_88e23e1041e01368a071449cb01ddd0f_ryuk.exe
Resource
win10v2004-20240226-en
Target
2024-05-10_88e23e1041e01368a071449cb01ddd0f_ryuk
Size
593KB
MD5
88e23e1041e01368a071449cb01ddd0f
SHA1
88e7212fdfe23afdd84308da23cf9e37868592b8
SHA256
ca8a9d83f7aa2429cb6775f8fe5d086397e4f610f4958b117302d9a0c90a63bf
SHA512
b00b83a8d1c1b0ed423a8aba82d012aa343c77462b563bded5bfed0de7e010bdda1e66eca9dee60d8edf700cedf58de0b7962f1fc475801525493c057751215b
SSDEEP
6144:6kjGH4/4vzAVE7wc/FUwfCV0jmQyin2ScFbfydy0HdutbgRXl8Gzy:pzw7ATyUSu0jmMnlTy0Hdk4xu
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Elevated_MpMiniSigStub.pdb
CreateToo
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ