Superlority_v3[.]0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Superlority_v3.0.exe
Size 14.3MB
Sample260830-3rs3yabl7x
SHA256 b74493df262b1b69261b47328e49cc15d9d145b20c1f9c6cf68d9a000f6b9c75
MD5 36689239d7fddea70b8250d79a7b3f56
SHA1 1952f603ea424339fa228b9c141a0c0147807185
SHA512 2e682cf7a394b412c714ee6dbd1ace2958a8a5b80de4c4beffee908d376e29a09c1df4a4cee9ea0a9fc7017e1470f6907b25dadc0f5ef9d85baf442ab5d0afe6
SSDEEP 196608:cSx1eO06EQH5U0k9P/sSUjzOAtlMDOAtlMDOAtlMDOAtlMDOAtlMDOAtlMDOAtln:c0AoG0kBU5tgtgtgtgtgtgtgtgtgta
TLSH
T133E623423BEEF45EDF6B96B481A4A2459755FD330E52C49BB18D00874F8BA403DBC1EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Superlority_v3.0.exe

File Explorer

Superlority_v3.0.exe

.exe 14.3MB

Superlority_v3.0.exe

IMPHASH 02cf6f19c0f1be68a24297f8c61d3e24
SHA256 b74493df262b1b69261b47328e49cc15d9d145b20c1f9c6cf68d9a000f6b9c75
MD5 36689239d7fddea70b8250d79a7b3f56
SHA1 1952f603ea424339fa228b9c141a0c0147807185
SHA512 2e682cf7a394b412c714ee6dbd1ace2958a8a5b80de4c4beffee908d376e29a09c1df4a4cee9ea0a9fc7017e1470f6907b25dadc0f5ef9d85baf442ab5d0afe6
SSDEEP 196608:cSx1eO06EQH5U0k9P/sSUjzOAtlMDOAtlMDOAtlMDOAtlMDOAtlMDOAtlMDOAtln:c0AoG0kBU5tgtgtgtgtgtgtgtgtgta
TLSH
T133E623423BEEF45EDF6B96B481A4A2459755FD330E52C49BB18D00874F8BA403DBC1EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

105584

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

helper_e912f263.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

GetTokenInformation OpenProcessToken

kernel32

CompareStringW LCMapStringW HeapSize GetFileType CloseHandle GetCurrentThreadId GetLastError VirtualAlloc VirtualProtect VirtualFree SetLastError GetVersionExW GetACP QueryPerformanceCounter GetTickCount GetSystemInfo GetCurrentProcessId GetProcessHeap HeapAlloc HeapFree GetLogicalDrives GetCurrentProcess FreeEnvironmentStringsW WaitForSingleObject GetFullPathNameW ReleaseMutex SetFileInformationByHandle CreateFileW HeapReAlloc QueryPerformanceFrequency CreateThread FlushFileBuffers GetCurrentThread RtlCaptureContext GetProcAddress GetSystemTimePreciseAsFileTime SetFileTime GetEnvironmentStringsW TerminateProcess GetStdHandle SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW WaitForSingleObjectEx LoadLibraryA CreateMutexA FindFirstFileExW FindClose ExitProcess WideCharToMultiByte SetEnvironmentVariableW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer Sleep DecodePointer GetModuleHandleW FormatMessageW GetModuleFileNameW GetModuleHandleA FindNextFileW InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW SetStdHandle GetCPInfo GetOEMCP IsValidCodePage GetCommandLineA GetModuleHandleExW WriteFile RaiseException LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer RtlUnwind IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime

user32

GetDesktopWindow GetMessageTime GetForegroundWindow GetSystemMetrics GetDoubleClickTime GetCursorPos

ntdll

NtWriteFile RtlNtStatusToDosError

Name

.text

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Superlority_v3.0.exe

api-ms-win-core-synch-l1-2-0

advapi32

kernel32

user32

ntdll

generic