2024-05-16_b0c46e3d5d9970d014df83c78aa41bc4_ryuk

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-16_b0c46e3d5d9970d014df83c78aa41bc4_ryuk
Size

1.6MB
MD5

b0c46e3d5d9970d014df83c78aa41bc4
SHA1

5e1646ed1080be45a1cc0e5a54a4fac58e6de3c8
SHA256

39c39ee4ea8371c642310704306af71bc977266c98e394145c0120df7ed5c591
SHA512

12ed4905c48774b81e3dd30b42dc4d9f7f706ef110e5a7ea290c80dc1e8822f980b1535229182a7c69ae00ff18b0a8676d05d5b8859a02166ae89cb3ac21508f
SSDEEP

49152:5DXOPFJK9bbYF8paMB8QMy3bHwPMNg/VUyW+ekBeZmC:50WhrNNg/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-16_b0c46e3d5d9970d014df83c78aa41bc4_ryuk

Files

2024-05-16_b0c46e3d5d9970d014df83c78aa41bc4_ryuk
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 918KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 918KB - Virtual size: 918KB

.rdata Size: 256KB - Virtual size: 255KB

.data Size: 4KB - Virtual size: 21KB

.pdata Size: 27KB - Virtual size: 27KB

.00cfg Size: 512B - Virtual size: 56B

.gxfg Size: 11KB - Virtual size: 10KB

.tls Size: 512B - Virtual size: 17B

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 360KB - Virtual size: 359KB

.reloc Size: 8KB - Virtual size: 7KB

.rdata1 Size: 4KB - Virtual size: 4KB

.sdata Size: 4KB - Virtual size: 4KB

.text
Size: 918KB - Virtual size: 918KB

.rdata
Size: 256KB - Virtual size: 255KB

.data
Size: 4KB - Virtual size: 21KB

.pdata
Size: 27KB - Virtual size: 27KB

.00cfg
Size: 512B - Virtual size: 56B

.gxfg
Size: 11KB - Virtual size: 10KB

.tls
Size: 512B - Virtual size: 17B

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 360KB - Virtual size: 359KB

.reloc
Size: 8KB - Virtual size: 7KB

.rdata1
Size: 4KB - Virtual size: 4KB

.sdata
Size: 4KB - Virtual size: 4KB