rhjryjyj[.]exe | Triage™

General

Target
rhjryjyj.exe
Size 467KB
Sample240902-sx28pavalb
SHA256 0f5978c1e5026feea6e28485ceb99b48105d73a77517faf40c1e57d638a5cdd4
MD5 ab2d2914e268ac8754e408bdd6c109cd
SHA1 936a1529158b699ebfaf97e937f17936d321920c
SHA512 c421cb6c41640e1866b891c941151903ad51e04a437b6d90faa6c732f2e98ef4172631453f9a60dcd8c0e4ffd39ec8c13277961c06a4119b10aff91037318fcf
SSDEEP 12288:B67J/HG/VFbEB46/qW7MzwwQsWWejzl1OplmA39:B69tlCWM8wQsWW2FA39
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rhjryjyj.exe

File Explorer

rhjryjyj.exe

.exe 467KB

rhjryjyj.exe

IMPHASH 7104f45d3898c7272c98ee997c55432b
SHA256 0f5978c1e5026feea6e28485ceb99b48105d73a77517faf40c1e57d638a5cdd4
MD5 ab2d2914e268ac8754e408bdd6c109cd
SHA1 936a1529158b699ebfaf97e937f17936d321920c
SHA512 c421cb6c41640e1866b891c941151903ad51e04a437b6d90faa6c732f2e98ef4172631453f9a60dcd8c0e4ffd39ec8c13277961c06a4119b10aff91037318fcf
SSDEEP 12288:B67J/HG/VFbEB46/qW7MzwwQsWWejzl1OplmA39:B69tlCWM8wQsWW2FA39
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5705

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW GetFullPathNameA TryEnterCriticalSection GetConsoleAliasesLengthW GetNumaProcessorNode DebugActiveProcessStop GetDefaultCommConfigW CallNamedPipeA InterlockedIncrement GetEnvironmentStringsW GlobalLock GetComputerNameW FlushConsoleInputBuffer GetModuleHandleW GetUserDefaultLangID GetSystemTimes SetHandleCount GlobalAlloc LoadLibraryW WriteConsoleOutputA HeapDestroy SetConsoleMode CreateDirectoryA InterlockedExchange GetStartupInfoA GetStdHandle GetLastError GetProcAddress UnhandledExceptionFilter FindNextChangeNotification FindAtomA FoldStringW GetModuleFileNameA EnumDateFormatsA FreeEnvironmentStringsW VirtualProtect LocalSize CloseHandle HeapFree HeapAlloc EncodePointer DecodePointer MultiByteToWideChar GetCommandLineA HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate ExitProcess WriteFile GetModuleFileNameW Sleep HeapSize GetCPInfo InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId WideCharToMultiByte InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc RtlUnwind LCMapStringW GetStringTypeW IsProcessorFeaturePresent

Sharing