Static task
static1
Behavioral task
behavioral1
Sample
a6f94c1717ad8bb2d8a2db5d3b286e1e5bbe6b5086216661250579e654826e73_Sigmanly.exe
Resource
win7-20240903-en
General
-
Target
a6f94c1717ad8bb2d8a2db5d3b286e1e5bbe6b5086216661250579e654826e73_Sigmanly
-
Size
4.3MB
-
MD5
f4d4066fee7e7e63dd914f564202af5b
-
SHA1
bf2330d98dc66911f0078539ee48e6ad8dbb4686
-
SHA256
a6f94c1717ad8bb2d8a2db5d3b286e1e5bbe6b5086216661250579e654826e73
-
SHA512
468d6cbcfbebf5a1140a161fe742188df14d942a3681f1931ae7c0c840c24f9c3b2e55745478c1472e2f6cfec96df27265da93917c390c6ad0c51d6d9062fba1
-
SSDEEP
98304:yGJm9VvjOlk+BwDMO8cAqgVRWn8sTNRjWJzVGKRUVXKEbUzH:OvurwD38ygVRW8sBRCzGOuUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6f94c1717ad8bb2d8a2db5d3b286e1e5bbe6b5086216661250579e654826e73_Sigmanly
Files
-
a6f94c1717ad8bb2d8a2db5d3b286e1e5bbe6b5086216661250579e654826e73_Sigmanly.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghxtnmlj Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
znrsnumk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE