Sulfoxide 1[.]4[.]7z

Resubmissions

20/06/2026, 20:33

260620-zcbzbsav71

20/06/2026, 20:32

260620-zbskpaav7s3

Sharing

Copy URL Twitter E-mail

General

Target
Sulfoxide 1.4.7z
Size 70KB
Sample260620-zcbzbsav71
SHA256 bf5130b6134c0df6086d5312d6af9b9701a8a434291fe1dc8927a58b9411df73
MD5 a06a4b9f04737742961ebfc4cbbc39de
SHA1 3c405ad06b8f160479b3170ccc0380964df86f57
SHA512 b3898bc6481cce9f82857cbe16d541c26f274c54e76f706cc4246193a9725ab57e88e4d110972d304c84b177039ebfdf53e02f534f32ea41ea9bdbe494d1c6ef
SSDEEP 1536:7n8ArWCUU3FEcu00NYrLDUfEzKXKJZM2aYh8zHAnaMrJhhwmqE+Gtjo5TUA:75ZN5rLIwCK4achQhi8tU5IA
TLSH
T113630266035A32FB212007704B933D842633A6D43D682506C8BBEAE5F70649B78F77F5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sulfoxide.exe

File Explorer

Sulfoxide 1.4.7z

.7z 70KB
Sulfoxide.exe

.exe 320KB

Sulfoxide 1.4.7z

SHA256 bf5130b6134c0df6086d5312d6af9b9701a8a434291fe1dc8927a58b9411df73
MD5 a06a4b9f04737742961ebfc4cbbc39de
SHA1 3c405ad06b8f160479b3170ccc0380964df86f57
SHA512 b3898bc6481cce9f82857cbe16d541c26f274c54e76f706cc4246193a9725ab57e88e4d110972d304c84b177039ebfdf53e02f534f32ea41ea9bdbe494d1c6ef
SSDEEP 1536:7n8ArWCUU3FEcu00NYrLDUfEzKXKJZM2aYh8zHAnaMrJhhwmqE+Gtjo5TUA:75ZN5rLIwCK4achQhi8tU5IA
TLSH
T113630266035A32FB212007704B933D842633A6D43D682506C8BBEAE5F70649B78F77F5
MD5 SHA1 SHA512 SSDEEP TLSH

Password

SulfoxideTrojanHorse

Sulfoxide.exe

IMPHASH 2a6ec77198272d092e52cab068a363f4
SHA256 9188c9e15123585764eeaf2664acab784a64c629ad7bde14696788bd4fe9e805
MD5 8fc94fde580157356fb0186246a814e6
SHA1 a7d44d37570c67b25bcc5b6ed1891b6e3b700abe
SHA512 383714930d92e09dce23ba2450eebc876bf5da5531f29ded21535e8f962617dd8b889f509a53933b876f50f182e902986928609a7795ad064de575fd2be20d36
SSDEEP 3072:cV4jz0z3u/GC/JoVmrjSo6XeQiCJBNntFw7v8F333O:q40z3urZuelwN6x
TLSH
T1736491017D1C8A91D9010070CCAADAB6AA266DE5B25031E366FFFF3FF930746456E2B5
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

SulfoxideTrojanHorse

Minor OS version

Major OS version

Entry point

39955

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Development\Malware Projects\Sulfoxide\Release\Sulfoxide.pdb

kernel32

lstrcmpA GetModuleHandleW GetCurrentThreadId WaitForSingleObject GetCurrentThread HeapSetInformation SetPriorityClass GetStringTypeW GetFileSize LCMapStringW LCMapStringA GetLocaleInfoA MultiByteToWideChar HeapSize RtlUnwind HeapReAlloc IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSection LoadLibraryA InterlockedExchange FreeLibrary EnterCriticalSection LocalFree QueryPerformanceFrequency GetLastError lstrcatA GetSystemDirectoryA GetFileAttributesA GetSystemDirectoryW QueryPerformanceCounter GetCurrentProcess lstrlenA GetTickCount GetLogicalDriveStringsW CreateProcessW FindFirstFileW CreateFileA CreateThread SetFileAttributesW HeapAlloc DeleteFileW CloseHandle FindNextFileW WaitForMultipleObjects FindClose GetProcAddress GetTempPathW SetThreadPriority CreateFileW GetModuleFileNameW ReadFile CopyFileW TerminateThread LoadLibraryW WriteFile Sleep GetSystemInfo GetProcessHeap VirtualFree VirtualAlloc HeapFree GetStringTypeA LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId HeapCreate HeapDestroy InterlockedDecrement SetLastError GetCommandLineA GetVersionExA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetModuleHandleA ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement LocalAlloc

user32

CreateWindowExA ExitWindowsEx EnumDisplayDevicesA EnumDisplaySettingsA ReleaseDC DrawTextA DrawIcon GetSystemMetrics ShowCursor ChangeDisplaySettingsA MessageBoxA SetCursorPos RedrawWindow RegisterClassExA LoadIconA GetDC TranslateMessage PeekMessageA DefWindowProcA SetWindowPos ShowWindow IsWindow DispatchMessageA LoadCursorA GetWindowThreadProcessId EnumDisplayMonitors UnionRect UpdateLayeredWindow

gdi32

SetTextColor CreateFontA SetBkMode StretchBlt LineDDA SelectClipRgn SetPolyFillMode SetStretchBltMode PlgBlt PolyBezier CreateSolidBrush CreateEllipticRgn CreatePolygonRgn MoveToEx PatBlt LineTo CreateHatchBrush Polygon CreateDIBSection BitBlt DeleteDC DeleteObject SelectObject CreateCompatibleDC CreateCompatibleBitmap CreatePen

advapi32

RegOpenCurrentUser RegCloseKey OpenProcessToken AdjustTokenPrivileges FreeSid SetEntriesInAclW AllocateAndInitializeSid LookupPrivilegeValueW SetNamedSecurityInfoW RegOpenKeyExA RegQueryValueExA

winmm

waveOutOpen waveOutReset waveOutUnprepareHeader waveOutWrite waveOutPrepareHeader

msimg32

AlphaBlend