SecuriteInfo[.]com[.]Trojan[.]Siggen23[.]9548[.]30187[.]20005[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Trojan.Siggen23.9548.30187.20005.exe
Size

443KB
MD5

3e936ce1e2ba3c89a2d17ff72d6b1e7f
SHA1

07024cadac976c38e48cfb3013baa30409fab609
SHA256

9ca8dc8342e23488434e9dd93ce915c1a562ab0f8b4a5e9c4d994e78fcddf5d2
SHA512

b8f5e0b931d98268be4073343c77a83daad3bf5abda6bd2b11bbfb6548f8108f821bcb26526e89c2aca60dc32f8de141d4df83ff2d0e93031622123f587f7568
SSDEEP

6144:+3xhN/cQCCXXV19rqqhsh2ZmHqH75ZJs6xZtTS79JCyEXaaKWl+Z7hfx5KIxiMej:QmQC+TOMsh24HA5ZJsonSBJt6azK3Ml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Siggen23.9548.30187.20005.exe

Files

SecuriteInfo.com.Trojan.Siggen23.9548.30187.20005.exe
.exe windows:4 windows x86 arch:x86

fd091cf3211a377595fdbb9a846d8568

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

SaveDC

ole32

CoInitialize

comctl32

ImageList_Add

shell32

SHGetFileInfoA

ntdll

RtlAdjustPrivilege
RtlSetProcessIsCritical

Sections

.MPRESS1
Size: 427KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE