SecuriteInfo[.]com[.]Trojan[.]Siggen20[.]61320[.]429[.]3015[.]exe

General

Target
SecuriteInfo.com.Trojan.Siggen20.61320.429.3015.exe
Size 791KB
Sample230609-rzpvpscd28
SHA256 a34d64d2dc1a0f3bb6ffa8f44882eea76f3ae20f493f546008679dd1ba8736fb
MD5 47e741dd4805ffd50f5b18a89ddbf667
SHA1 126522aede0f8a685fbe7ce7f975744c46ac058d
SHA512 d07debcfc03f166dba341cac0cae8ca425fe59c39459e915c005603fed81804b404f01447a3c7c4d795eca250652a978c909ebc88264247133b196ed6c1f2fd2
SSDEEP 12288:dNECB8fTkRVdiRobaFErwRgxIE5so7pa4KGwdqA0KGIU1nSeYZV7HV7hluJ48KE:40biRoSErVxIE577pajb0KG/SeIslK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Siggen20.61320.429.3015.exe

File Explorer

SecuriteInfo.com.Trojan.Siggen20.61320.429.3015.exe

.exe 791KB

SecuriteInfo.com.Trojan.Siggen20.61320.429.3015.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a34d64d2dc1a0f3bb6ffa8f44882eea76f3ae20f493f546008679dd1ba8736fb
MD5 47e741dd4805ffd50f5b18a89ddbf667
SHA1 126522aede0f8a685fbe7ce7f975744c46ac058d
SHA512 d07debcfc03f166dba341cac0cae8ca425fe59c39459e915c005603fed81804b404f01447a3c7c4d795eca250652a978c909ebc88264247133b196ed6c1f2fd2
SSDEEP 12288:dNECB8fTkRVdiRobaFErwRgxIE5so7pa4KGwdqA0KGIU1nSeYZV7HV7hluJ48KE:40biRoSErVxIE577pajb0KG/SeIslK
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

802210

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Trojan.Siggen20.61320.429.3015.exe

mscoree