Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-09_d40fcd4fb914ec3d2db2d8127e345944_ryuk.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-09_d40fcd4fb914ec3d2db2d8127e345944_ryuk.exe
Resource
win10v2004-20240709-en
Target
2024-07-09_d40fcd4fb914ec3d2db2d8127e345944_ryuk
Size
1.1MB
MD5
d40fcd4fb914ec3d2db2d8127e345944
SHA1
4738a28e2bfd2c5e119c192d6a31563ea04d7151
SHA256
1ba7732b24353c14f2e7ed5b09b09bb1174ff0a0ba646afd9767dcad549c0d38
SHA512
6b335914c536e5c351916d60642e183fb83edb93032bb8a2bd2e8dac22411443669bde42a6abd4fceac85237ec62349d42e6cc747a688c58fe2ce64270a65c77
SSDEEP
24576:EQNwhMBYshYFNRLp1k6eD3MsYgzGQd9/6lTRBTaJA+BltQ:EQiM2siNR1F1kCJR1aJZBI
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\svn\ibis\trunk\rputil\src\rputil\x64\Release\rputil.pdb
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiClassGuidsFromNameExW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
CM_Get_Device_ID_ExW
SetupDiGetDeviceInfoListDetailW
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiSetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiGetINFClassW
SetupSetNonInteractiveMode
DriverPackageUninstallW
DriverPackagePreinstallW
DriverPackageGetPathW
DIFXAPISetLogCallbackW
inet_addr
GetIpAddrTable
RpcStringFreeW
UuidToStringW
UuidCreate
CreateEventW
SetLastError
GetCPInfo
EncodePointer
WriteConsoleW
TlsAlloc
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetCommandLineW
GetOEMCP
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
RtlLookupFunctionEntry
LocalFree
MultiByteToWideChar
RaiseException
GetLastError
GetProcAddress
DecodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryW
CloseHandle
CreateFileW
DeleteFileW
WaitForSingleObject
GetFullPathNameW
FreeLibrary
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetEnvironmentVariableW
FormatMessageW
GetProcessHeap
FileTimeToSystemTime
CopyFileW
GetComputerNameW
GetLocalTime
lstrlenW
GetFileAttributesW
Sleep
CreateProcessW
TerminateProcess
GetExitCodeProcess
FindFirstFileW
FindClose
CompareStringW
FindNextFileW
GetVersionExW
WideCharToMultiByte
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GlobalAlloc
CreateDirectoryW
GetCommandLineA
MoveFileW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
lstrcpyW
WaitForMultipleObjects
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetFileSizeEx
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetCurrentDirectoryW
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetACP
WriteFile
RtlVirtualUnwind
GetStdHandle
GetModuleFileNameA
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
ReadFile
GetFileAttributesExW
GetDriveTypeW
LoadLibraryExW
RtlUnwindEx
RtlPcToFileHeader
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
SetEvent
ResetEvent
WaitForSingleObjectEx
GetFileTime
SetEndOfFile
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlCaptureContext
CharNextW
SendMessageTimeoutW
wvsprintfW
MessageBoxW
DispatchMessageW
PeekMessageW
TranslateMessage
EnumWindows
GetWindowTextW
wsprintfW
GetWindowThreadProcessId
GetParent
EnumChildWindows
GetDlgCtrlID
GetWindowLongPtrW
PostMessageW
IsWindow
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetPrinterW
ClosePrinter
SetPrinterW
GetPrinterDriverDirectoryW
SetPrinterDataW
EnumPrintersW
EnumPrinterDriversW
EnumPortsW
DeletePortW
GetPrinterDriverW
ord203
ord204
XcvDataW
AddPrinterW
DeletePrinter
AddPrinterConnectionW
DeletePrinterConnectionW
DeletePrinterDriverW
DeletePrinterDriverExW
DocumentPropertiesW
PrinterProperties
OpenPrinterW
RegQueryValueExW
RegOpenKeyExW
ShellExecuteW
StrToIntW
PathCombineW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ