2024-06-12_f68551f0ed1e87670a42016f88b3fee5_ryuk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-12_f68551f0ed1e87670a42016f88b3fee5_ryuk
Size

473KB
MD5

f68551f0ed1e87670a42016f88b3fee5
SHA1

210a241c555c09d60f7b79dc6b14f9503f777a5d
SHA256

301e7014c702bbc61cd053c2d1db46e6704058676ab37fcc513d8ff906d446c9
SHA512

9d8c36a147cc9cc1a83dec19a7582bf4d93f2b3f75d149d63f209b259fbbd8655ed03fa701a4956364ac714822b30225564da1e8b596efb6d286cfa69376c768
SSDEEP

6144:b3iamB0M5qgbwRsy6Sa2nmuk2syo2Ymvo9f8viA5lnzAqzaXFnNYOx:pMVqgbmsy/fBoRm6UviA5lsBFnNtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-12_f68551f0ed1e87670a42016f88b3fee5_ryuk

Files

2024-06-12_f68551f0ed1e87670a42016f88b3fee5_ryuk
.exe windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ