Sulfoxide 1[.]1[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Sulfoxide 1.1.zip
Size 80KB
Sample260930-fxb1aazbna
SHA256 bb7865fe4f9456ede9c07772f4365128a45196de5671303ddfdd6545b6d94abf
MD5 77d754db6bc650afbb59ba98d8d54a4b
SHA1 efc9e0eab77900d3807355e0bd2ad280198d05c1
SHA512 7ab01d22a784eb260f8060ef441e74e95fdd18d10dca5bbb62824a3684be495d75273d71be53c4969c196e3ef9f0d6dc8623ec3ce323d6c41b290b208bd2e550
SSDEEP 1536:b+ULFzPIj6/JML+/jnm2FUvW2RpJ3NHqvd5qv0sY45X/:i+zQj6mL+LmgUhRpJi5qv0s15
TLSH
T1F183025E42AA84A6157B7AB705AD2385761F725DA0F0B8C481CCF8135B02F63BC361EF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sulfoxide.exe

File Explorer

Sulfoxide 1.1.zip

.zip 80KB
Sulfoxide.exe

.exe 304KB

Sulfoxide 1.1.zip

SHA256 bb7865fe4f9456ede9c07772f4365128a45196de5671303ddfdd6545b6d94abf
MD5 77d754db6bc650afbb59ba98d8d54a4b
SHA1 efc9e0eab77900d3807355e0bd2ad280198d05c1
SHA512 7ab01d22a784eb260f8060ef441e74e95fdd18d10dca5bbb62824a3684be495d75273d71be53c4969c196e3ef9f0d6dc8623ec3ce323d6c41b290b208bd2e550
SSDEEP 1536:b+ULFzPIj6/JML+/jnm2FUvW2RpJ3NHqvd5qv0sY45X/:i+zQj6mL+LmgUhRpJi5qv0s15
TLSH
T1F183025E42AA84A6157B7AB705AD2385761F725DA0F0B8C481CCF8135B02F63BC361EF
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Sulfoxide.exe

IMPHASH 392d0bc34c07050bdaeed40a719a8701
SHA256 4f9834b3a967a63a1f7511f997e374d536fb95986e74791a767baaa1cf4783ff
MD5 270f85bdf25aee2e9f044f6163119279
SHA1 ae4591dbb362f90f2b43b3a0f3eaf9403250e8c5
SHA512 c03a2e4c6b8cb42f0f4b3ba3390e60c5957935b1a6fa7127a40c26a38df3728a5337a58d0dd4907e94638ed7683f19514ed61dab7ea07942247e97f063c8705b
SSDEEP 3072:OenzPe5iRKVTvn02bcWhfeXfB4BN+trw7v8F333r:OQeHrFePue6Y
TLSH
T197648E017D5D8E91D8010070CCAADAB66A266CA5B21031E766FFFF7FF930342956E2B5
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38291

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Development\Malware Projects\Sulfoxide\Release\Sulfoxide.pdb

kernel32

GetFileAttributesA GetSystemDirectoryA lstrcatA GetLastError GetModuleHandleW GetCurrentThreadId SetThreadPriority SetPriorityClass WaitForSingleObject GetCurrentThread HeapSetInformation GetSystemDirectoryW GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA MultiByteToWideChar HeapSize RtlUnwind HeapReAlloc IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSection LoadLibraryA InterlockedExchange FreeLibrary EnterCriticalSection QueryPerformanceCounter GetCurrentProcess lstrlenA lstrcmpA GetFileSize LocalFree QueryPerformanceFrequency GetTickCount CreateProcessW FindFirstFileW CreateFileA CreateThread SetFileAttributesW DeleteFileW CloseHandle HeapAlloc FindNextFileW WaitForMultipleObjects FindClose GetProcAddress GetTempPathW CreateFileW GetModuleFileNameW ReadFile CopyFileW TerminateThread LoadLibraryW WriteFile GetLogicalDriveStringsW Sleep GetSystemInfo GetProcessHeap VirtualFree VirtualAlloc HeapFree LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId HeapCreate HeapDestroy InterlockedDecrement SetLastError GetCommandLineA GetVersionExA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetModuleHandleA ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement LocalAlloc

user32

CreateWindowExA ExitWindowsEx EnumDisplayDevicesA EnumDisplaySettingsA UpdateLayeredWindow DrawTextA DrawIcon GetSystemMetrics ChangeDisplaySettingsA ShowCursor MessageBoxA SetCursorPos RedrawWindow RegisterClassExA LoadIconA ReleaseDC TranslateMessage PeekMessageA DefWindowProcA SetWindowPos ShowWindow IsWindow DispatchMessageA LoadCursorA GetWindowThreadProcessId EnumDisplayMonitors UnionRect GetDC

gdi32

SetTextColor CreateFontA SetBkMode PatBlt LineTo CreateHatchBrush Polygon StretchBlt LineDDA SelectClipRgn SetPolyFillMode PlgBlt CreatePen PolyBezier CreateSolidBrush CreateEllipticRgn CreatePolygonRgn MoveToEx CreateDIBSection SelectObject CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteDC DeleteObject SetStretchBltMode

advapi32

AllocateAndInitializeSid LookupPrivilegeValueW SetNamedSecurityInfoW OpenProcessToken AdjustTokenPrivileges FreeSid SetEntriesInAclW

winmm

waveOutOpen waveOutReset waveOutWrite waveOutUnprepareHeader waveOutPrepareHeader

msimg32

AlphaBlend