SecuriteInfo[.]com[.]Trojan[.]PWS[.]Siggen3[.]35279[.]1356[.]9470[.]exe

General

Target
SecuriteInfo.com.Trojan.PWS.Siggen3.35279.1356.9470.exe
Size 278KB
Sample231227-ew1ftacef5
SHA256 2628201fa47cb015f5cc8ed60f7495ee3897a5b361971f82a7ebc2cd24cace46
MD5 444ef12c9c65d13a3ecb84588f25d884
SHA1 747acb8560b53a1217ddf65f315307119dcc6a1c
SHA512 00165426b6da702f79416abfc9dac051d013efc4c69aaa9bd1c932b1931cc3620ea11fd1c47593f099abde4d588c713a9f4cad293df01482921975e1188a571c
SSDEEP 3072:bxW0wACiOu/LQ5E2eqFuZJiju1Yx0RhC3pbrbg+n//aIZZ1Mg4y7xveB5Jy+Lddt:dWOCiOu/LQw6u8ueVHh//hV9P7xg5fl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.PWS.Siggen3.35279.1356.9470.exe

File Explorer

SecuriteInfo.com.Trojan.PWS.Siggen3.35279.1356.9470.exe

.exe 278KB

SecuriteInfo.com.Trojan.PWS.Siggen3.35279.1356.9470.exe

IMPHASH 1a755a7760c13e9f9910148d88732e21
SHA256 2628201fa47cb015f5cc8ed60f7495ee3897a5b361971f82a7ebc2cd24cace46
MD5 444ef12c9c65d13a3ecb84588f25d884
SHA1 747acb8560b53a1217ddf65f315307119dcc6a1c
SHA512 00165426b6da702f79416abfc9dac051d013efc4c69aaa9bd1c932b1931cc3620ea11fd1c47593f099abde4d588c713a9f4cad293df01482921975e1188a571c
SSDEEP 3072:bxW0wACiOu/LQ5E2eqFuZJiju1Yx0RhC3pbrbg+n//aIZZ1Mg4y7xveB5Jy+Lddt:dWOCiOu/LQw6u8ueVHh//hV9P7xg5fl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8465

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc SetDefaultCommConfigA GlobalDeleteAtom SetPriorityClass TryEnterCriticalSection GetConsoleAliasesLengthW EnumDateFormatsExW MoveFileExA SetEndOfFile QueryPerformanceCounter CreateNamedPipeW GetCompressedFileSizeW GlobalAlloc LoadLibraryW ReadConsoleOutputW GetTimeFormatW HeapValidate LocalHandle GetModuleFileNameW lstrcatA CompareStringW MultiByteToWideChar CreateJobObjectA GetConsoleOutputCP GetLastError GetLongPathNameA SetVolumeLabelW SetComputerNameA SetTimerQueueTimer DisableThreadLibraryCalls BuildCommDCBW GetTempFileNameA OpenWaitableTimerA GetAtomNameA LoadLibraryA DnsHostnameToComputerNameA AddAtomW GlobalWire SetConsoleTitleW GetModuleHandleA FreeEnvironmentStringsW VirtualProtect GetCurrentDirectoryA LocalFree SetFileAttributesW LCMapStringW CopyFileExA SetEnvironmentVariableA CompareStringA GetTimeZoneInformation GetModuleHandleW Sleep GetProcAddress ExitProcess GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers DeleteCriticalSection FatalAppExitA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread GetStdHandle GetModuleFileNameA SetConsoleCtrlHandler FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate HeapDestroy VirtualFree HeapFree GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc RtlUnwind WriteConsoleA WriteConsoleW SetStdHandle HeapSize GetLocaleInfoW GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale ReadFile CreateFileA CloseHandle RaiseException

user32

GetMonitorInfoW GetDesktopWindow

Sharing