Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-10_12b060b273b9f5f0b0fb462992998d93_hijackloader_ryuk.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-10_12b060b273b9f5f0b0fb462992998d93_hijackloader_ryuk.exe
Resource
win10v2004-20241007-en
Target
2024-10-10_12b060b273b9f5f0b0fb462992998d93_hijackloader_ryuk
Size
265KB
MD5
12b060b273b9f5f0b0fb462992998d93
SHA1
714c6a45024b8f60935f11c61fabb127410f58da
SHA256
19d9a73ce4bd47e4728df58197939a8f1444534846c54fb2b28047db1d675021
SHA512
103eb08a842aee6e3df4f553b20184b403fdd1188ba810c24f6167d96805fca5bc813c1f689e461e6afc114a6dcd73f0feeea6c146cbdb2531e3dc5ed327d215
SSDEEP
6144:M03cnlD1F02SP57VBEOGB+LXF2UFWjtolMcknHovsv+:Onl/02wdVSGjkn26+
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\GUEBuild22.06.5578\GUE\Installer\Windows\Utility\setup\src\setup\x64\Release\setupEx.pdb
GetModuleFileNameExW
EnumProcesses
GetModuleBaseNameW
EnumProcessModules
GetStartupInfoW
GetExitCodeProcess
GetSystemWindowsDirectoryA
CreateDirectoryA
WideCharToMultiByte
GetLocalTime
LocalAlloc
LocalFree
WriteConsoleW
SetFilePointerEx
FlushFileBuffers
Sleep
GetProcessHeap
GetStringTypeW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CreateProcessW
GetSystemTimeAsFileTime
WaitForSingleObject
GetTickCount
OpenProcess
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
CloseHandle
CreateDirectoryW
CreateMutexW
GetFileAttributesW
GetLastError
GetCurrentProcess
FindClose
FindNextFileW
FindFirstFileW
GetNativeSystemInfo
HeapSize
HeapReAlloc
SetEndOfFile
ReadFile
CreateFileW
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
ReadConsoleW
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
RtlPcToFileHeader
EncodePointer
RaiseException
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetFileType
GetConsoleCP
GetConsoleMode
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsCharAlphaNumericW
MessageBoxW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
QueryServiceStatusEx
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegSetValueExW
RegFlushKey
ShellExecuteExW
WinVerifyTrust
CryptMsgGetParam
CertFindCertificateInStore
CryptQueryObject
CertGetNameStringW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ