Static task
static1
Behavioral task
behavioral1
Sample
SugarySpire.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SugarySpire.exe
Resource
win10v2004-20230220-en
General
-
Target
SugarySpire.exe
-
Size
10.6MB
-
MD5
d80f0bbc19c0bf80354aa494fc57672d
-
SHA1
186fd7682ca61e9d5e99c5df30a021ce2c56b188
-
SHA256
c1269e6f36c10d80a913e21f95500147e029c62b6fdac4ec79fe5f296bad86e7
-
SHA512
ef40f66bddb4c399dac7ef8731121700bb040a0b744b23a1f61048b1a9d228f85c5410e3c50c16fb007b004520c643f8b33d6d41b812917ce1aa6cefe1e65b53
-
SSDEEP
196608:XR/X44NMM88ZNqnSvfPAwgN9t2m+PnYXc5spNJhRSyqnXHYI4oVF1Gu+Lbr7kEEx:RX44XCGltB5
Malware Config
Signatures
Files
-
SugarySpire.exe.exe windows x86
13de0dd66113cf9a0ea8f28b9690b6ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCanonicalizeUrlA
InternetOpenA
InternetCrackUrlA
InternetConnectA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
HttpQueryInfoA
InternetGetConnectedState
d3d11
D3D11CreateDevice
dbghelp
MiniDumpWriteDump
winmm
joyGetPosEx
joyGetPos
mciSendStringA
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
ws2_32
WSAStartup
socket
setsockopt
sendto
send
select
recvfrom
recv
WSAGetLastError
inet_ntoa
inet_addr
htons
getsockopt
ioctlsocket
connect
closesocket
bind
listen
getaddrinfo
freeaddrinfo
getpeername
__WSAFDIsSet
htonl
ntohs
accept
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
kernel32
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
WriteConsoleW
HeapSize
SetEndOfFile
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetTimeZoneInformation
ReadConsoleW
HeapReAlloc
DecodePointer
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
OutputDebugStringA
GetCurrentProcess
GetCommandLineW
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
GetFinalPathNameByHandleW
GetFullPathNameW
CloseHandle
SetUnhandledExceptionFilter
GetLastError
SetErrorMode
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
MoveFileA
MultiByteToWideChar
WideCharToMultiByte
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateThread
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleWindow
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
GetEnvironmentVariableW
GetCurrentDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
SetLastError
GetExitCodeThread
LocalFree
FormatMessageW
GetFileAttributesA
GlobalAlloc
GlobalUnlock
GlobalLock
VerSetConditionMask
VerifyVersionInfoW
ExitProcess
lstrlenA
LoadLibraryA
WaitForSingleObjectEx
CreateEventExW
SetEvent
ResetEvent
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
HeapWalk
HeapValidate
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetModuleHandleExW
EncodePointer
LoadLibraryExW
RtlUnwind
SetFileAttributesW
MoveFileExW
ReadFile
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetStdHandle
WriteFile
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetTickCount64
IsValidLocale
GetFileAttributesExW
user32
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetFocus
SetDlgItemTextA
GetRawInputDeviceInfoA
GetRawInputDeviceList
MapWindowPoints
ClientToScreen
SetCursorPos
SetWindowTextW
MoveWindow
LoadImageW
LoadCursorW
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
keybd_event
GetAsyncKeyState
OpenClipboard
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
BringWindowToTop
SetWindowPos
ScreenToClient
DrawTextW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItem
EndDialog
DialogBoxParamW
CreateDialogParamW
MessageBoxW
ReleaseDC
GetDC
GetMonitorInfoW
MonitorFromWindow
EnumDisplaySettingsW
SetWindowLongW
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
SendMessageW
GetActiveWindow
SetProcessDPIAware
IsDialogMessageW
SetFocus
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
wsprintfW
MessageBoxA
GetCursorPos
UpdateWindow
gdi32
GetDeviceCaps
GetStockObject
SelectObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
SHGetFolderPathW
ole32
CoCreateInstance
CoTaskMemFree
CoInitialize
CoCreateFreeThreadedMarshaler
dxgi
CreateDXGIFactory1
rpcrt4
UuidToStringW
UuidCreate
mf
MFCreateMediaSession
MFCreateTopology
MFCreateTopologyNode
MFGetService
MFCreateAudioRendererActivate
MFCreateSampleGrabberSinkActivate
mfplat
MFCreateSourceResolver
MFStartup
MFCreateMediaType
dwmapi
DwmGetCompositionTimingInfo
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 633KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mydata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 425KB - Virtual size: 425KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ