rhtjpbm[.]exe | Triage™

Resubmissions

30/10/2026, 02:48

261030-daplragx8w

30/10/2026, 02:46

261030-c9ckssvwht6

Sharing

Copy URL Twitter E-mail

General

Target
rhtjpbm.exe
Size 17.3MB
Sample261030-daplragx8w
SHA256 c6fac2bd36dd7fe2a8c9ff59bce5f07b89fd40e5232827e86d3b03573bab82cb
MD5 6b9a926ef8492b0edf14d3777d9ff0f4
SHA1 31ffc78e438faaa8abf3704f8a35dddcada19b01
SHA512 08405076a2ac3c6cd646ef2f9ac8eac12d7c62a0ca6f5356ce2b6c316e19d941314973c0d964e3dc34b75ec02cbc806e7307ed6c3a6ff1c34d4fe7efde25c13d
SSDEEP 393216:NGvOs1oI2kSWprQucNx/vIzsY6rX5IWqCe71wl0gW0:NfsaI2kSWprvqBIoHxqCsuVW
TLSH
T17707ADD2F392C140E81A89358C26DBEA93227C19BF065B573184BF1F7DBB2C25F65681
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rhtjpbm.exe

File Explorer

rhtjpbm.exe

.exe 17.3MB

rhtjpbm.exe

IMPHASH 46a8e7e0a961400f727487a94ce112b5
SHA256 c6fac2bd36dd7fe2a8c9ff59bce5f07b89fd40e5232827e86d3b03573bab82cb
MD5 6b9a926ef8492b0edf14d3777d9ff0f4
SHA1 31ffc78e438faaa8abf3704f8a35dddcada19b01
SHA512 08405076a2ac3c6cd646ef2f9ac8eac12d7c62a0ca6f5356ce2b6c316e19d941314973c0d964e3dc34b75ec02cbc806e7307ed6c3a6ff1c34d4fe7efde25c13d
SSDEEP 393216:NGvOs1oI2kSWprQucNx/vIzsY6rX5IWqCe71wl0gW0:NfsaI2kSWprvqBIoHxqCsuVW
TLSH
T17707ADD2F392C140E81A89358C26DBEA93227C19BF065B573184BF1F7DBB2C25F65681
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1230192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Cs2En\OneDrive\Desktop\JewSploit_[unknowncheats.me]_\JewSploit\x64\Release\jewdestroyer.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

winmm

timeBeginPeriod timeEndPeriod PlaySoundA

msacm32

acmStreamPrepareHeader acmStreamClose acmStreamSize acmStreamConvert acmStreamUnprepareHeader acmStreamOpen

kernel32

InitOnceBeginInitialize WakeAllConditionVariable InitOnceComplete SleepConditionVariableSRW AcquireSRWLockExclusive GetModuleHandleW Sleep GetTickCount FillConsoleOutputCharacterA GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle SetConsoleMode GetConsoleMode GetLocalTime FillConsoleOutputAttribute ReadProcessMemory SetConsoleCursorPosition WriteProcessMemory WaitForSingleObject OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle Module32FirstW VirtualProtectEx VirtualAllocEx ReleaseSRWLockExclusive VirtualFreeEx VirtualQueryEx GetExitCodeProcess GetTickCount64 SetThreadPriority GetCurrentThreadId CreateThread GetModuleFileNameA FindFirstFileA FindNextFileA FindClose DeleteFileA CreateDirectoryA SetLastError GetModuleHandleA LoadLibraryA GetSystemInfo GetProcAddress FlushInstructionCache GetCurrentThread QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryW SizeofResource LockResource LoadResource FindResourceW GetWindowsDirectoryA MultiByteToWideChar GetLocaleInfoA FreeLibrary CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapFree MapViewOfFile UnmapViewOfFile CreateFileMappingA Module32NextW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead

user32

GetKeyState GetMessageExtraInfo TrackMouseEvent SetCapture IsWindowUnicode GetKeyNameTextA MapVirtualKeyA GetCapture ReleaseCapture GetKeyboardLayout SetCursorPos SendInput GetAsyncKeyState SetClassLongPtrW DestroyCursor SetLayeredWindowAttributes CreateCursor AttachThreadInput LoadCursorW SetCursor SystemParametersInfoW ShowCursor GetWindowLongW GetWindowThreadProcessId DefWindowProcW GetWindow GetFocus DestroyWindow IsWindowVisible SetWindowPos CreateWindowExW ScreenToClient UnregisterClassW EnumWindows ShowWindow IsWindow GetClassLongPtrW RegisterClassExW DispatchMessageW ClientToScreen PeekMessageW IsChild GetForegroundWindow SetProcessDPIAware SetFocus TranslateMessage ClipCursor SetWindowLongW GetClientRect PostQuitMessage SetForegroundWindow IsIconic GetCursorPos GetWindowTextW

msvcp140

??Bios_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Xbad_function_call@std@@YAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?_Xbad_alloc@std@@YAXXZ _Cnd_do_broadcast_at_thread_exit _Query_perf_counter _Thrd_detach _Mtx_lock _Mtx_unlock ?_Xlength_error@std@@YAXPEBD@Z _Thrd_id _Thrd_join ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?uncaught_exceptions@std@@YAHXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

msvcp140_atomic_wait

__std_atomic_notify_all_direct __std_atomic_wait_direct

imm32

ImmSetCandidateWindow ImmGetContext ImmReleaseContext ImmSetCompositionWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp __C_specific_handler __current_exception __current_exception_context __intrinsic_setjmp _CxxThrowException memmove memcpy longjmp strrchr strchr strstr __std_exception_copy __std_exception_destroy __std_terminate memset memchr

api-ms-win-crt-heap-l1-1-0

free _callnewh _set_new_mode malloc realloc

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _seh_filter_exe _set_app_type _register_onexit_function _get_initial_narrow_environment _initterm _initterm_e exit _exit _invoke_watson __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _initialize_onexit_table _initialize_narrow_environment abort _configure_narrow_argv terminate _beginthreadex

api-ms-win-crt-stdio-l1-1-0

fflush __stdio_common_vsprintf _wfopen __acrt_iob_func fputc fputs _set_fmode fseek ftell __p__commode fclose _get_stream_buffer_pointers _fseeki64 __stdio_common_vsscanf fread fsetpos ungetc setvbuf fgetpos fwrite fgetc

api-ms-win-crt-string-l1-1-0

_wcsicmp strncmp strcat_s strcmp isalnum strncpy tolower

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-convert-l1-1-0

strtol atoi atof

api-ms-win-crt-math-l1-1-0

logf pow lround ldexp lroundf powf _fdclass sinf sqrtf log acosf atan2f ceilf cosf expf floorf fmodf tanf __setusermatherr

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-locale-l1-1-0

_configthreadlocale