Loader_Sugary[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Loader_Sugary.exe
Size

17KB
MD5

856415e42ebc78ec08f014868b716aca
SHA1

d4b73dd9016f760d815c2a3e7358c861ca6b33ca
SHA256

18b6b45af7cb7da03a68e65625f269df8d3f6bdc3b7745bcd72c2d02a83b7124
SHA512

251cdda05d01a3e255abe375a3c1194ace4cddb9527271f35f014db1204f4a190f19df3b988819e174b4fb7bd25c17f1b189bb0e97770f7b7bc249b606a10180
SSDEEP

192:iRWM2mSM8stYcFwVc03KYSh36CV0ES4N6eRTdEsF5PvBSHwb/RF73KNrPiSVc8C5:iRWBMptYcFwVc03KCCmm7EDChq9JWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Loader_Sugary.exe

Files

Loader_Sugary.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

!Sugar
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ