Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-05_766ad34dae1f825fad4ccb3ec1b561c7_ryuk.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-07-05_766ad34dae1f825fad4ccb3ec1b561c7_ryuk.exe
Resource
win10v2004-20240704-en
Target
2024-07-05_766ad34dae1f825fad4ccb3ec1b561c7_ryuk
Size
167KB
MD5
766ad34dae1f825fad4ccb3ec1b561c7
SHA1
9b8f4f15ea1301cb9e89dd49675fe08f65f8a9dd
SHA256
c5091eb69d7d1b477564b4d1dc3e2acce273e331deda31cb06b4ce4d3ff9b2ac
SHA512
d56ed7162abebdbdca6504650f64590da104bcfa5a953503da3f6178849582d7dadbe54f992e6a2723b738f2af5b0895c9cfd4776cea43466cb4ca0ee33ed030
SSDEEP
3072:TsgxyOHJGoNUdWQBaOB7gVZLIykLQVa2AtR7xGJkXF+c:TscxJRio47gV9TiGkx
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Z:\Trunk\Bin\Win\Installer\drvinst_x64.pdb
DriverPackageUninstallW
DriverPackageInstallW
DIFXAPISetLogCallbackW
SetupUninstallOEMInfW
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiClassGuidsFromNameW
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsW
SetupDiDestroyDeviceInfoList
SetupGetFieldCount
SetupDiGetINFClassW
SetupCopyOEMInfW
SetupCloseInfFile
SetupFindNextLine
SetupGetStringFieldW
SetupOpenInfFileW
SetupFindFirstLineW
SetupDiEnumDeviceInfo
CreateFileW
WriteConsoleW
FindFirstFileW
GetFullPathNameW
FindNextFileW
GetCurrentProcess
TerminateProcess
FindClose
GetWindowsDirectoryW
GetLastError
GetModuleFileNameA
GetVersionExW
CloseHandle
GetSystemInfo
LocalFree
FormatMessageA
SetFilePointerEx
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetFileType
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
EncodePointer
RaiseException
GetModuleFileNameW
RtlUnwindEx
InitializeSListHead
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
GetStringTypeW
CompareStringW
LCMapStringW
MessageBoxExW
ExitWindowsEx
SystemFunction036
RegSetValueExW
RegisterEventSourceA
OpenProcessToken
RegSetValueExA
LookupPrivilegeValueW
DeregisterEventSource
AdjustTokenPrivileges
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
ReportEventA
RegOpenKeyExW
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
PathAppendW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ