General

  • Target
    2024-06-03_d3e343ce973d1c7ec99c5c59ea5f1f52_ryuk
  • Size 2.7MB
  • Sample240603-jmp1yahf62
  • SHA256 3b0d9a46b08a1ce99dccfc84172547f1d117fe39668b4270568b0a0e5e2ae79f
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2024-06-03_d3e343ce973d1c7ec99c5c59ea5f1f52_ryuk
    .exe 2.7MB

2024-06-03_d3e343ce973d1c7ec99c5c59ea5f1f52_ryuk

  • IMPHASH fc34ccfc3706590e7f2a0133ad738b08
  • SHA256 3b0d9a46b08a1ce99dccfc84172547f1d117fe39668b4270568b0a0e5e2ae79f
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
2
Major OS version
5
Entry point
988552
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\WinRAR\build\winrar64\Release\WinRAR.pdb