Analysis
- user interaction
yes - max time kernel
150s - max time network
208s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/08/2026, 09:08
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SIGNALIS/SIGNALIS.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SIGNALIS/SIGNALIS.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target SIGNALIS/SIGNALIS.exe
- Size 638KB
- Sample260810-k34ppsfb54
- SHA256 db13f76d9d3542294dab5c150ded37b6424c95dcca4c0b24796d4e982b7fb973
- MD5 0823d132912746bebc039dcd604a3b43
- SHA1 e5b7915328d6942a09c3b737c1023d5a9a11ad2a
- SHA512 be9bcd99312c32c839e7bcc41d27f2b7ce0824b9b9b6342603e6cefdee091941689f9d9edeb8c5c92561eaa9bd3569ca3865c1631699b398ccfd8d3e21cb9cfb
- SSDEEP 1536:TCL9gXAX271lcBzqEY2lkCsJVxYDXosWkd09dl3aPGMCjkOqxHQSBBBBBBBBzu+6:UgXpJozm2lkCspYDbM5qxHQvVBFUs
- TLSH T186D4157D523858A9EC7601FD0A24A6B02685FFF1448E589BE0B43D2379BD26C5F7A334
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4632 SIGNALIS.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4632 wrote to memory of 5704 4632 SIGNALIS.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\SIGNALIS\SIGNALIS.exe"C:\Users\Admin\AppData\Local\Temp\SIGNALIS\SIGNALIS.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4632 -
C:\Users\Admin\AppData\Local\Temp\SIGNALIS\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\SIGNALIS\UnityCrashHandler64.exe" --attach 4632 29267548610562⤵PID:5704
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2ec 0x2e81⤵PID:4224