Static task
static1
Behavioral task
behavioral1
Sample
SiglusEngine.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SiglusEngine.exe
Resource
win10v2004-20230221-en
General
-
Target
SiglusEngine.exe
-
Size
8.5MB
-
MD5
ace2ac221b8270b6ee5295ecb82440e1
-
SHA1
f99b618e518961b96f585ee88ade78f942fa76ad
-
SHA256
f15613b3b1507c5ca8cac1d5fb9c010c8f3cb3c26dad12104ff6b0219904bd08
-
SHA512
4b13c08c4c5239ceb45105af27e5588447e2dae80849636b2ebf7682f612089f2aafeb8ef1c91357f5572faeb24f60fe0f455eab816fd493a0752f75344285cd
-
SSDEEP
98304:Py8VvfSDBUVsrYFP51GGu+l4Bb3tYK7dgkPAkIHfbH/i6:HLFPV5l4BhY8B
Malware Config
Signatures
Files
-
SiglusEngine.exe.exe windows x86
1b16e5a55a31a436cbf44c4cb4efc9c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQuery
LoadLibraryExW
lstrcmpiW
IsBadWritePtr
GetTempFileNameW
MoveFileA
lstrcmpiA
SetFilePointer
FreeResource
CompareStringA
GetFullPathNameA
InterlockedCompareExchange
InitializeCriticalSection
InterlockedExchange
FindResourceA
UnmapViewOfFile
CreateFileMappingA
GetFileSize
MapViewOfFile
GetModuleHandleA
LoadLibraryA
GetTempPathA
GetTempFileNameA
CreateFileA
DeleteFileA
OutputDebugStringA
GetVersionExA
lstrlenA
VirtualFree
VirtualAlloc
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
SetEndOfFile
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetModuleHandleW
GetConsoleCP
ReadConsoleW
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
SizeofResource
SetCurrentDirectoryW
HeapReAlloc
GlobalHandle
InterlockedIncrement
FindResourceW
LockResource
LoadResource
GlobalFree
InterlockedDecrement
GetDriveTypeW
SetErrorMode
HeapFree
GlobalMemoryStatus
GetVersionExW
GetLocaleInfoW
GetSystemDirectoryW
GetProcessHeap
HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
SetLastError
Sleep
GlobalUnlock
GlobalLock
MulDiv
lstrcmpW
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
GetModuleFileNameW
DecodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
LCMapStringW
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetCPInfo
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapSize
AreFileApisANSI
GetModuleHandleExW
ReadFile
RtlUnwind
GetCommandLineW
GetACP
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
MultiByteToWideChar
GlobalAlloc
ExitThread
GetTickCount
ExitProcess
LocalFree
FormatMessageW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
CreateProcessW
DeleteFileW
MoveFileW
CopyFileW
CreateFileW
SetFileAttributesW
GetFileAttributesW
CreateThread
ReleaseSemaphore
WaitForSingleObject
CloseHandle
CreateSemaphoreW
SetFilePointerEx
GetLocalTime
GetSystemInfo
WideCharToMultiByte
user32
ClientToScreen
SetWindowLongW
GetSystemMetrics
EndPaint
BeginPaint
CharNextW
SetCursorPos
SetTimer
EnumDisplaySettingsExW
ReleaseDC
GetDC
GetClientRect
GetAsyncKeyState
FillRect
ScreenToClient
GetFocus
GetWindowLongW
CreateWindowExW
DestroyWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MoveWindow
SetWindowPos
SendMessageW
InvalidateRect
InvalidateRgn
ShowWindow
RedrawWindow
EnableWindow
TrackPopupMenu
CreatePopupMenu
UnregisterClassW
EmptyClipboard
ValidateRect
LoadImageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
SetDlgItemTextW
SetCursor
GetCursor
CreateIconIndirect
DestroyIcon
FindWindowW
DialogBoxIndirectParamW
GetMessageW
PeekMessageW
IsIconic
EnumDisplayDevicesW
GetWindowPlacement
GetCursorPos
GetActiveWindow
AdjustWindowRect
EndDialog
ChangeDisplaySettingsExW
CallWindowProcW
RegisterWindowMessageW
DefWindowProcW
ReleaseCapture
CreateAcceleratorTableW
GetDesktopWindow
DestroyAcceleratorTable
GetSysColor
RegisterClassExW
LoadCursorW
GetClassInfoExW
GetClassNameW
IsWindow
GetDlgItem
GetParent
IsChild
GetWindow
SetFocus
SetCapture
GetKeyState
MessageBoxW
WaitForInputIdle
OpenClipboard
SetClipboardData
CloseClipboard
GetWindowRect
IsDialogMessageW
TranslateMessage
DispatchMessageW
LoadIconW
AdjustWindowRectEx
GetPropW
SetPropW
RemovePropW
PostQuitMessage
SetActiveWindow
IsWindowEnabled
SetClassLongW
GetMenu
SetMenu
PostMessageW
UpdateWindow
MonitorFromPoint
GetMonitorInfoW
SystemParametersInfoW
CreateDialogParamW
CreateDialogIndirectParamW
DialogBoxParamW
ShowScrollBar
CreateMenu
DestroyMenu
GetMenuItemCount
InsertMenuItemW
RemoveMenu
CheckMenuItem
GetMenuState
gdi32
GetDeviceCaps
TextOutW
SetTextColor
BitBlt
CreateSolidBrush
CreateCompatibleDC
CreateFontIndirectW
SelectObject
CreateFontW
DeleteObject
CreateCompatibleBitmap
GetStockObject
GetTextMetricsW
EnumFontFamiliesExW
GetTextExtentPoint32W
GdiFlush
CreateDIBSection
SetStretchBltMode
StretchBlt
CreateBitmap
GetObjectW
SetBkMode
AddFontMemResourceEx
AddFontResourceExW
DeleteDC
ExtTextOutW
MoveToEx
ExtTextOutA
SetMapMode
SetTextAlign
CreateFontIndirectA
GetFontLanguageInfo
SetBkColor
GetCharacterPlacementW
GetCharacterPlacementA
GetGlyphOutlineA
GetTextMetricsA
GetObjectA
GetGlyphOutlineW
advapi32
RegCreateKeyExW
RegQueryValueExA
GetUserNameA
RegQueryValueExW
CryptAcquireContextW
CryptCreateHash
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
CryptHashData
RegOpenKeyExW
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptEncrypt
CryptDeriveKey
RegOpenKeyA
shell32
SHCreateDirectoryExW
DragQueryFileW
DragFinish
SHGetFolderPathW
ShellExecuteExW
SHGetSpecialFolderPathW
ole32
CoTaskMemFree
CLSIDFromString
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoCreateInstance
OleUninitialize
CoSetProxyBlanket
CoInitialize
CoUninitialize
CoTaskMemRealloc
StringFromGUID2
OleInitialize
CoTaskMemAlloc
oleaut32
DispCallFunc
SysAllocStringLen
VariantChangeType
VariantCopy
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
VarUI4FromStr
SysStringLen
SysFreeString
SysAllocString
winmm
mmioOpenW
mmioSetInfo
mmioAdvance
timeGetTime
mciSendStringW
mciGetErrorStringW
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
mmioGetInfo
mmioDescend
mmioClose
mmioSeek
mmioAscend
mmioRead
comctl32
CreateStatusWindowW
InitCommonControlsEx
dsound
ord3
ord1
siglusdrm
SteamInternal_CreateInterface
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamAPI_Shutdown
SteamAPI_Init
SteamAPI_UnregisterCallback
wininet
HttpSendRequestW
InternetCloseHandle
HttpOpenRequestW
InternetConnectW
InternetOpenW
HttpQueryInfoW
InternetReadFile
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
imm32
ImmAssociateContext
d3d9
Direct3DCreate9
comdlg32
GetOpenFileNameW
GetSaveFileNameW
ws2_32
WSACleanup
closesocket
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 652KB - Virtual size: 651KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 185KB - Virtual size: 67.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ