Petya Ransomware Detection

This rule detects the Petya ransomware by identifying specific byte patterns within the executable. It looks for a combination of patterns related to the entry point, shutdown routines, a unique section name (sectionxxxx), and cryptographic generation functions. The rule also verifies that the file is a Windows executable by checking for the 'MZ' header.