Static task
static1
Behavioral task
behavioral1
Sample
sugo2_crk.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
sugo2_crk.exe
Resource
win10v2004-20230220-en
General
-
Target
sugo2_crk.exe
-
Size
708KB
-
MD5
0806a0c265c0f8ceb75a601d06d7d326
-
SHA1
c0beca49cf04075745e58a28e836db3547b2ec21
-
SHA256
9a93afb84126c2c55932c67018011e1fc66ac278f63648198dca3bfdd39afc13
-
SHA512
a5a970c4eeccc407f7a35e36b7445a5ce93d18aa11e1e826d56178f6f17fb3739c1d5b011eef3a7e84dd6590d43471b3c899fbde87be5596a64e94ca37936d86
-
SSDEEP
6144:L9xnV1zhndKGpN04WepN1ehXoxG5LdTBtpe4jFsRAsedPua+EBseZ43edRVFt9ND:h5zVd/Q4WWyEUUIFeUsedba3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sugo2_crk.exe
Files
-
sugo2_crk.exe.exe windows x86
3329e5dea1261f468100a4434b39bd51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentProcessId
GetFileSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FreeLibrary
CreateFileA
GetCPInfo
FlushFileBuffers
SetStdHandle
VirtualAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
WriteFile
SetFileAttributesA
GetLocalTime
GetModuleHandleA
GetModuleFileNameA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetTickCount
Sleep
GetVersionExA
SetFilePointer
GetVersion
GetCurrentDirectoryA
SetCurrentDirectoryA
MultiByteToWideChar
GetFileAttributesA
FreeEnvironmentStringsA
GetSystemTime
ReadFile
CloseHandle
HeapSize
HeapReAlloc
UnhandledExceptionFilter
GetCurrentProcess
lstrlenA
RtlUnwind
RaiseException
GetLastError
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetStartupInfoA
GetCommandLineA
ExitProcess
GetCurrentThreadId
TlsAlloc
SetLastError
HeapFree
HeapAlloc
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
TerminateProcess
user32
AdjustWindowRect
SetMenu
LoadMenuA
DestroyMenu
MessageBoxA
PostQuitMessage
SetCapture
ReleaseCapture
DefWindowProcA
FindWindowA
LoadIconA
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
SetFocus
PostMessageA
SetCursorPos
ChangeDisplaySettingsA
GetWindowLongA
SetWindowLongA
MoveWindow
DrawMenuBar
GetDC
ReleaseDC
GetDlgItem
GetWindowTextA
EndDialog
SetWindowTextA
GetCursorPos
ScreenToClient
SetRect
CreateWindowExA
SetScrollInfo
DestroyWindow
SendMessageA
InvalidateRect
DialogBoxParamA
ClientToScreen
GetSubMenu
TrackPopupMenu
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
SetMenuItemInfoA
wsprintfA
gdi32
EnumFontFamiliesExA
GetGlyphOutlineA
GetTextMetricsA
GetCharABCWidthsA
GetDeviceCaps
BitBlt
DeleteDC
CreateCompatibleDC
GdiFlush
CreateDIBSection
TextOutA
DeleteObject
CreateFontA
SelectObject
SetTextColor
SetBkMode
GetStockObject
comdlg32
GetSaveFileNameA
advapi32
ReportEventA
DeregisterEventSource
RegisterEventSourceA
winmm
timeBeginPeriod
timeGetDevCaps
timeGetTime
dsound
ord1
Sections
.text Size: 480KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 176KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE