SecuriteInfo[.]com[.]Trojan[.]Siggen26[.]6766[.]1834[.]3852[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.Siggen26.6766.1834.3852.exe
Size 2.3MB
Sample240212-3teckaee4w
SHA256 c24d184cdbdeff2bd7bd14e7bd5e3c6853570959fdd3b357696674cc589b188a
MD5 f0a42f5d56ccf81b1fdeaae7320e5de1
SHA1 6561c08ee12b73efc30a9cb8439197de64f3fb7c
SHA512 452693301911cba386747a401b7b94af5f9b142fc5fe66f93eed29696c2600c67bad41d3c16193d5115ecd2235f461172c447dbbec9acaff1ffa2000fdf56122
SSDEEP 49152:YtNjudw+TeIsz5y48CU+1VvWlLt0YiO7N+9k/tm5lxMTGiR9X:vCTy48CU+1VIJ0XO8uVm5/uGiH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Siggen26.6766.1834.3852.exe

File Explorer

SecuriteInfo.com.Trojan.Siggen26.6766.1834.3852.exe

.exe 2.3MB

SecuriteInfo.com.Trojan.Siggen26.6766.1834.3852.exe

IMPHASH 2eabe9054cad5152567f0699947a2c5b
SHA256 c24d184cdbdeff2bd7bd14e7bd5e3c6853570959fdd3b357696674cc589b188a
MD5 f0a42f5d56ccf81b1fdeaae7320e5de1
SHA1 6561c08ee12b73efc30a9cb8439197de64f3fb7c
SHA512 452693301911cba386747a401b7b94af5f9b142fc5fe66f93eed29696c2600c67bad41d3c16193d5115ecd2235f461172c447dbbec9acaff1ffa2000fdf56122
SSDEEP 49152:YtNjudw+TeIsz5y48CU+1VvWlLt0YiO7N+9k/tm5lxMTGiR9X:vCTy48CU+1VIJ0XO8uVm5/uGiH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6045696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

571KB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

zcmtppku

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

kmucpvwr

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.taggant

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

SecuriteInfo.com.Trojan.Siggen26.6766.1834.3852.exe

kernel32

generic