SIGMA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SIGMA.exe
Size

13.5MB
MD5

e5287133604987639d55af87c7d9db58
SHA1

5f876f5f847b5e787fa2e2b1d7983abdf5c5ca0b
SHA256

29c6d3baa828542e256ec38a6d96963aa2422d80fd49c41deff873a53d6c3649
SHA512

6614fb782f299c320f7b84de8668ce2f02e28bde11529ca85517518fe7632d72255c8a230f6170824e8acb774af6b90a1cc059dd39b69c9ab30039e13f2f94cc
SSDEEP

393216:WX8bqryuEM31O8A7S0roj0ELAuZ+JB06hNyb:vbqzc8A7Fovq0+yb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SIGMA.exe

Files

SIGMA.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\COMPUS.COM.UA\source\repos\SIGMA\SIGMA\obj\Debug\SIGMA.pdb

Sections

.text
Size: 13.5MB - Virtual size: 13.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ