Sulfoxide 1[.]1 no window fix[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Sulfoxide 1.1 no window fix.zip
Size 79KB
Sample260930-fxcltavyaw
SHA256 e7fcf939f767f2e3034b80a00756de65abe58e05a6dce99264d7fd93c38e3c02
MD5 286e7708ec68e22427906f8cce04f850
SHA1 108dd00e869b44d855d8e473205844e62f6dcbf9
SHA512 447be97b1a5bb9a3df4449c59c944c808da690ec839b80b1dc675a122e69f2b5c25ccc0817fa56bf9cf8233a0d5710975ea146f20400d3cecf96eced77fcd2fd
SSDEEP 1536:cq1vuISEe6IvkSZ5V5yXhJwhUvlNLvKHd3Xa8/gl6B6/PdbOPr9C1F:cq1vTSEe6c/Z5V5qAhUvlNSX16/PdCPu
TLSH
T1D48302AF93AB25F1EDB962C440E1DA7DF2857C512691F211C5A049182F1E3F31DB438E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sulfoxide.exe

File Explorer

Sulfoxide 1.1 no window fix.zip

.zip 79KB
Sulfoxide.exe

.exe 304KB

Sulfoxide 1.1 no window fix.zip

SHA256 e7fcf939f767f2e3034b80a00756de65abe58e05a6dce99264d7fd93c38e3c02
MD5 286e7708ec68e22427906f8cce04f850
SHA1 108dd00e869b44d855d8e473205844e62f6dcbf9
SHA512 447be97b1a5bb9a3df4449c59c944c808da690ec839b80b1dc675a122e69f2b5c25ccc0817fa56bf9cf8233a0d5710975ea146f20400d3cecf96eced77fcd2fd
SSDEEP 1536:cq1vuISEe6IvkSZ5V5yXhJwhUvlNLvKHd3Xa8/gl6B6/PdbOPr9C1F:cq1vTSEe6c/Z5V5qAhUvlNSX16/PdCPu
TLSH
T1D48302AF93AB25F1EDB962C440E1DA7DF2857C512691F211C5A049182F1E3F31DB438E
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Sulfoxide.exe

IMPHASH 2b76a3c08d4243d00768177c4da12211
SHA256 b444440a98251cc3bb1da3cadbb6d9b184fef6cb9a2881fcdbd06047ee22c19d
MD5 8d86f45c0a1efd5a750dfe2db5111688
SHA1 acdeb5d1912f240b6dd56ef324afbbdaf6ba9d5a
SHA512 091c71588a4e3f6c0bfe67253f20caa2ecdfecd8024298dcd895df681c776f0535d57b1010b760ecf8b034affdaa3f5e8bc2d3fa7ad27b6d329f970117e06cf8
SSDEEP 3072:2bzClBqgYoinbuKbPwhU+bcjOb4BNvt3gw7v8F333r:2KlUJx+QjOM06Y
TLSH
T14D647D017D5D8A91D8010070CCAADAB66E226DA5B21031E762FFFF7FF930352956E2B5
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

36387

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Development\Malware Projects\Sulfoxide\Release\Sulfoxide.pdb

kernel32

GetFileAttributesA GetSystemDirectoryA lstrcatA GetLastError GetCurrentThreadId SetThreadPriority SetPriorityClass WaitForSingleObject GetCurrentThread HeapSetInformation GetSystemDirectoryW GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA MultiByteToWideChar HeapSize RtlUnwind HeapReAlloc IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSection LoadLibraryA InterlockedExchange FreeLibrary EnterCriticalSection QueryPerformanceCounter GetCurrentProcess lstrlenA lstrcmpA GetFileSize LocalFree QueryPerformanceFrequency GetTickCount CreateProcessW FindFirstFileW CreateFileA CreateThread SetFileAttributesW DeleteFileW CloseHandle HeapAlloc FindNextFileW WaitForMultipleObjects FindClose GetProcAddress GetTempPathW CreateFileW GetModuleFileNameW ReadFile CopyFileW TerminateThread LoadLibraryW WriteFile GetLogicalDriveStringsW Sleep GetSystemInfo GetProcessHeap VirtualFree VirtualAlloc HeapFree LeaveCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId HeapCreate HeapDestroy InterlockedDecrement SetLastError GetCommandLineA GetVersionExA GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetModuleHandleA ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement LocalAlloc

user32

ExitWindowsEx EnumDisplayDevicesA EnumDisplaySettingsA UpdateLayeredWindow DrawTextA DrawIcon GetSystemMetrics ChangeDisplaySettingsA ShowCursor MessageBoxA SetCursorPos RedrawWindow LoadIconA ReleaseDC LoadCursorA EnumDisplayMonitors UnionRect GetDC

gdi32

SetTextColor CreateFontA SetBkMode PatBlt LineTo CreateHatchBrush Polygon StretchBlt LineDDA SelectClipRgn SetPolyFillMode PlgBlt CreatePen PolyBezier CreateSolidBrush CreateEllipticRgn CreatePolygonRgn MoveToEx CreateDIBSection SelectObject CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteDC DeleteObject SetStretchBltMode

advapi32

AllocateAndInitializeSid LookupPrivilegeValueW SetNamedSecurityInfoW OpenProcessToken AdjustTokenPrivileges FreeSid SetEntriesInAclW

winmm

waveOutOpen waveOutReset waveOutWrite waveOutUnprepareHeader waveOutPrepareHeader

msimg32

AlphaBlend