Static task
static1
Behavioral task
behavioral1
Sample
Trojan.MSIL.Siggen.exe
Resource
win7-20240903-en
General
-
Target
Trojan.MSIL.Siggen.atmn-f19f7803a88945eb9370a47e0ac9c59a2f25d9a18c2af844298dbdfcc5177ddfN
-
Size
4.9MB
-
MD5
fa6a70b32304b41f2ca98115cae843f0
-
SHA1
15e0536c0b4be4fca7ee2a03a7e40a4075a18950
-
SHA256
f19f7803a88945eb9370a47e0ac9c59a2f25d9a18c2af844298dbdfcc5177ddf
-
SHA512
6226c2d25875e7b7fc930094ebfb6cbc67dfd4c52c0c3211adcf3a18c0ca5b9b6d5d68312dc44522fd8b36b777cd2cee0c201c24228e751d1e8e506491839279
-
SSDEEP
49152:jl5MTGChZpxtlBBgxchXb/zqP6DUtRgs5q289dAnSz44hnW1XgnYu6fYmPkMSx8E:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Trojan.MSIL.Siggen.atmn-f19f7803a88945eb9370a47e0ac9c59a2f25d9a18c2af844298dbdfcc5177ddfN
Files
-
Trojan.MSIL.Siggen.atmn-f19f7803a88945eb9370a47e0ac9c59a2f25d9a18c2af844298dbdfcc5177ddfN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ