Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-06_371da5d17ea20a4d61005b3115aeb95a_ryuk.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-06_371da5d17ea20a4d61005b3115aeb95a_ryuk.exe
Resource
win10v2004-20240704-en
Target
2024-07-06_371da5d17ea20a4d61005b3115aeb95a_ryuk
Size
5.1MB
MD5
371da5d17ea20a4d61005b3115aeb95a
SHA1
1e0c630c813a81e6d035e7a9700c0449d0619c8e
SHA256
96cc8435c7e252f6022aad83f2b681b9e8bb0abe8d58a29260c6eff126df386f
SHA512
d1ecaf5e75a8129af60845b105b14189dbf85c8517f1bca4310aa6c9c3926cba291f4a4f4beeac15f923e5374909e2b6439c63aefd52ad6897de0b11a6518b03
SSDEEP
98304:0gcVG7137TG3IhcgJyG3TVqzvrO1OoAcDB0+inIYXBov+z9Wllvj3polE0:FCG7137a3xSpovAOofdgIjmz2jpo60
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\WKSPC\4.7Fix\sourceCode\build\WindowsStandaloneSupport\Variations\win64_nondevelopment_il2cpp\WindowsPlayer_x64_Master.pdb
UnityMain
FindNextFileW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WTSSendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
�8��[=��%���*�J���J���]��;��<�H��>~��������@�C����j�P;�L���Y5*M�>Y��g9XG' Y��e�E�Vn=+�l�a^¤���1�ا�t�����D4�?^���b����D���a�MCwI��Z��(��Jv�3��r2���\(��o�~ )�gX��8c��b��Eɟ�"m�%��"h��}�N�$����\���4�zGb�C���:��Ԋ�~���+bp�ॐu/�G&���^W�T�1���9}�.�:.�g����0L�[)<J���Ʃ�tʣ���hP����F<�[ �~������(s#fZk����;�d٪I�K'F@2��֎��l?9���/�?G�(�ڻ��QFd��1�!���ꄈ�&Bn+��2�����Rc"�9��!���OħP֚z� �?)�żI NXc�)ۃ��h �oD���)�%`�����Z�]��S��o\dqp��V����$:�:լ��������o�:�-��]���:�VH�`�IU�v��Vs�7��O��&�Q����B]Lw3���[�9ը�g�����>��U��a��Fd'�4n�{+��% &%�B��&�9�P6d˅K�VW�:�mv��k,��zЭ/��U{iQ��f�~$+1{0�z$i�^��D=?��[�>�Fr�H��.,%�M� {�d �7CK��M���|��ݦ�?2��P� @���u��+̈́��d��qZC��ٙ���ѽ'a#d=�%�A*��W��Tɲ�ȵ��\`���)ƺ���6B^� ` E��)����O��9eB:E�x9B6H�v?y�d�������Vv�`6e�% kp�e�\�7D��\-I��Ǚ@3NS}�W��6Ҋ�2��W�4�鷞a��|�!��2���Rx����b-ӟ����_����N�>��7"Ч6Ry^K���·�@Ӟ��uU������9��[<T�d#�Y������Z�D+��2��:��P.9��ij6˲��چ�J[�9���S�II��w�)���Q�z����b�婯jF?�b�(�'��q�è��u4�& �����E(ud��VĻI��Q��0�|��F��e�2p���$��n;�Q�J7S4�� o8�ѱ=���m���P{[��o�AV����2^~��l�R���QU���a��[n�W�8��"\�Qe��=w���g_|���B�M�_�(�d���)���9;�?ٷ�L:�d� _.�$��L���v�S�0�/�@�o�1- &@�6|�ڔ�yRAp{+�5�§7��5���)R�~�U�(���ˌ#6y-�����Kq�u9~~v�/���9�����ԭ��_MH9w�F{�l�>��U�w��8�_��ҙ~q�]J���4�t҄�^&x-I>�6���<?̈́����<���FdGze�Oa�bl��hd�I?��X�s�~�~gv�ϙ_��@Y��HϛtO��[��!����w���yV����y���äY�N��ޑa:�� ���=�l�@�G��Z��\��ѩ,_H�>Qxe�-�BQ�V�D���H�����+�}��r�4w��d��_�!��ն$znp?�����a̼-\I��U"�#���[؞�������$��:,�Eg�U2�W��h�,�G|��}e'��6!�wt��#� ��b<�P�������W3T���E5!?U֣-Cah> ���3<� �Q��$s�w*'�.� ���sG��1�5��-I�*N��5Z~~h��9�æO��O� �_ڭ���f�7������{ ��9 ��=<R���e-h�:�.����RW����(���$�]��� !5\1��"س:��6+���ɓ��0NG@Ǻ^j�?}���)IY`Q$÷��Wj(�`��?�B|_�B�VS�X�c)?�� �A"[T��d {�����%�ʦDg������ �h��R�F�4랁 }�G7A��2��J,è�������0�$��� �j'�% o�2�@�;}y�C,��� L�����$�1w_��<P�B%cQ��c'�iS�#W�_r�J��Z �}� <����v��VDl��N��!�?�"l�-C���K�t5Ջ(�� ����[Vw��U]4^�Wb+�_���p ��A{�3�$��fGQ��%�wJX"�8�ڄ��"KC�����A� �EO�����ЄվXآ7��Q�����&,�O�V��IY����L���F�����GF/&�D�^�y��� �B״�>CO��#\[�� - �z����T2H��S�NU����/j ��'�L�y���&��?N�E��E�f�y?n�+["�]����EŦ����{�R3%��������X1+���U�ũ���kr,$�9N��J/�S ��kFM/��V)�0��Wy��<?5(��E�����%�P�=ڕ:\�dC� �����r�m|�� �&{���< ��!���@�ط��� ���q�4�\�q~����w��[|r�ـnF�R!G��T�-��h/(�q{�V���d��4�d㫤m;�Z�����-W����L~&?�49{6�d��P&���U��/d4"������Η���}DP ���\�JMX�6��bl[䒊�e �f�o�M�9}l%����� �u��j ae�/u��g~�N�[eq`���51n������L㺶��i��HS�u�V��l�s����6�f֘��X'�LʯfŻ}w�_��������= N�Y�#�9�%9r��E|z��\�����:�g�v)������V�o���=�h��Σ�.ȝ�e��D�)3z��[�[�s�-�r~z�4���&xއU����\�r���r�tD{F�<P�j�w�hRb�כ��zɳ��)����~w�$���5�^��A ����mHkKg�]�.��`]m����@3��w$��grg˷��l�i���?sQͼ�:�3�$=(���p4y_���g�rU���:]/o]t��� 墳N�ܶ:j�x�`P.��?��O8��הx����~Υ�l <�&I(Z�=z�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ