SecuriteInfo[.]com[.]Trojan[.]Siggen29[.]65231[.]29631[.]18210[.]dll

General

Target
SecuriteInfo.com.Trojan.Siggen29.65231.29631.18210.dll
Size 259KB
Sample250604-wh8cyack2s
SHA256 2907480701d5cd8b3f1577165d59c6321dd172ad6e18e96ecc7b95c67e4e450d
MD5 40ecf3b9627783b858f342b765f91780
SHA1 91f073a86e47fd09c27b856b975f1ce4df9e6646
SHA512 fa76cf04b10cc1565362cf8d052c170f9c1ff62bc78d6c1bb96ad335ef438f113ad65bac7602017ca446fa19066c6ec6dafe2e64a3224373c2e8d8ad6c1d14a6
SSDEEP 6144:ds7Pz6MhtyuqCxevrwP4fJ8JIiI9Npm62mvFsQk3z8:d0q04h8vIjpm6TY8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Trojan.Siggen29.65231.29631.18210.dll

File Explorer

SecuriteInfo.com.Trojan.Siggen29.65231.29631.18210.dll

.dll 259KB

SecuriteInfo.com.Trojan.Siggen29.65231.29631.18210.dll

IMPHASH 993e3fcbcab0ffdde9d950113c2f613b
SHA256 2907480701d5cd8b3f1577165d59c6321dd172ad6e18e96ecc7b95c67e4e450d
MD5 40ecf3b9627783b858f342b765f91780
SHA1 91f073a86e47fd09c27b856b975f1ce4df9e6646
SHA512 fa76cf04b10cc1565362cf8d052c170f9c1ff62bc78d6c1bb96ad335ef438f113ad65bac7602017ca446fa19066c6ec6dafe2e64a3224373c2e8d8ad6c1d14a6
SSDEEP 6144:ds7Pz6MhtyuqCxevrwP4fJ8JIiI9Npm62mvFsQk3z8:d0q04h8vIjpm6TY8
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

150638

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcessHeap HeapAlloc HeapFree HeapReAlloc GetModuleHandleA GetProcAddress TlsGetValue TlsSetValue CloseHandle InitOnceBeginInitialize TlsAlloc InitOnceComplete TlsFree TryAcquireSRWLockExclusive ReleaseSRWLockExclusive GetStdHandle GetLastError GetConsoleMode WaitForSingleObject WriteConsoleW SetLastError WaitForSingleObjectEx LoadLibraryA GetCurrentProcess CreateMutexA ReleaseMutex GetEnvironmentVariableW GetModuleHandleW FormatMessageW GetModuleFileNameW GetCommandLineW CreateFileW GetFullPathNameW GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW AcquireSRWLockExclusive CreateProcessW GetFileAttributesW DuplicateHandle CreateThread GetCurrentProcessId CreateNamedPipeW SetThreadStackGuarantee GetCurrentThread ReadFileEx SleepEx WriteFileEx ExitProcess GetCurrentDirectoryW RtlCaptureContext AcquireSRWLockShared ReleaseSRWLockShared DecodePointer SetFilePointerEx QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwind InterlockedFlushSList EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeLibrary LoadLibraryExW RaiseException GetModuleHandleExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte LCMapStringW GetFileType GetStringTypeW HeapSize SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP

bcrypt

BCryptGenRandom BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider

Sharing