Defanging ryuk for validating signature detections

We modify a known bad sample of ryuk to "defang" it and enable safe verification of signature detections. The entry function of the Portable Executable is patched to immediately call _exit(1) before entering the main function of the program.

Link to download Prelude Operator - www.prelude.org/download/current