Static task
static1
Behavioral task
behavioral1
Sample
sogou.exe
Resource
win10v2004-20230220-en
General
-
Target
sogou.exe.bin
-
Size
2.9MB
-
MD5
cacb8917e0542a52a2f70ed0edec8403
-
SHA1
7d176fc6b8ce6821538f1879bc23316dabc235e1
-
SHA256
593029cadf28069c50cd49ae12e338767ba8e2432dc290bc924457ce87fdd779
-
SHA512
4274c3cd948c5e43487e78ea064e4f8e968fd0cd9699839e032d73db8473ba17332c34ef1b3af90bc10ead07515a2d6e3a694bc0375b54a47d2d2a509011a765
-
SSDEEP
49152:UYzV9colMmavuainElgx9VJzxY/ufB48duiXdqDS20gv/6x7Phn6XLBnw1AJyMpK:h9cUMmavuaiyu9VJ2/ufB1uiXIDS20gm
Malware Config
Signatures
Files
-
sogou.exe.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 459KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ