DirtyDecrypt Ransomware Detection

This YARA rule detects the DirtyDecrypt ransomware by identifying specific byte patterns (signatures) within the executable. The rule looks for a combination of patterns related to entry point code, hashing functions, key management (get, destroy, import), and encryption/decryption routines, as well as a specific pattern named 'mrwhite'. The presence of these combined patterns indicates the file is likely the DirtyDecrypt ransomware.