SecuriteInfo[.]com[.]Trojan[.]Siggen34[.]22534[.]8995[.]17333[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.Siggen34.22534.8995.17333.exe
Size 4.9MB
Sample260924-2e37psysav
SHA256 6f21b609ec46ec04b046bc20406931cb1f62916e427500eb1716cc43a86165da
MD5 38ae4ca1252804b46ac4c0dcba0ee480
SHA1 99fce0f9e3f269729cbcdf52ced9195de98025b9
SHA512 270a466a4e9317a6845241697d93b955ccec05e6c9be9328f1513996bfca0c2c6ebcd41fa9df9cbc504d059509f0aaf883eccbc6ffa2f5d6c543c183495de799
SSDEEP 98304:rOx6LtE7HJTkgcQXxGO9JsbC2q642+Z2PdNpHtO03ucRA8eq2SBMQBSAhzEgUI4h:rEWt0JTkmXDuTrJCSN2CFA8elSBMQBWH
TLSH
T12736330EEFA754FDC41BC53852E7C931F4B274A04E31BF2E9150AD366D22D90A67862B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
SecuriteInfo.com.Trojan.Siggen34.22534.8995.17333.exe

File Explorer

SecuriteInfo.com.Trojan.Siggen34.22534.8995.17333.exe

.exe 4.9MB

SecuriteInfo.com.Trojan.Siggen34.22534.8995.17333.exe

IMPHASH 9a66a4928f793d4f509002298076c178
SHA256 6f21b609ec46ec04b046bc20406931cb1f62916e427500eb1716cc43a86165da
MD5 38ae4ca1252804b46ac4c0dcba0ee480
SHA1 99fce0f9e3f269729cbcdf52ced9195de98025b9
SHA512 270a466a4e9317a6845241697d93b955ccec05e6c9be9328f1513996bfca0c2c6ebcd41fa9df9cbc504d059509f0aaf883eccbc6ffa2f5d6c543c183495de799
SSDEEP 98304:rOx6LtE7HJTkgcQXxGO9JsbC2q642+Z2PdNpHtO03ucRA8eq2SBMQBSAhzEgUI4h:rEWt0JTkmXDuTrJCSN2CFA8elSBMQBWH
TLSH
T12736330EEFA754FDC41BC53852E7C931F4B274A04E31BF2E9150AD366D22D90A67862B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d8:07:cb:d2:1b:27:9a:14:5f:0e:1b:49:67:ad:5b:e8:6e:60:7c:05:98:ae:fb:7b:97:6c:1e:b0:75:b2:c5:03

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Google LLC

Chains

Sep 23, 2026

CN=Google LLC

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

ChangeServiceConfigW CloseServiceHandle ControlService CreateServiceW DeleteService GetTokenInformation OpenProcessToken OpenSCManagerW OpenServiceW QueryServiceStatus RegCloseKey RegCreateKeyExW RegDeleteTreeW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW RegisterServiceCtrlHandlerExW SetServiceStatus StartServiceCtrlDispatcherW StartServiceW

bcrypt

BCryptCloseAlgorithmProvider BCryptCreateHash BCryptFinishHash BCryptGetProperty BCryptHashData BCryptOpenAlgorithmProvider

kernel32

AddVectoredExceptionHandler CloseHandle CopyFileW CreateDirectoryW CreateEventW CreateFileA CreateFileW CreateProcessW CreateRemoteThread CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW EnterCriticalSection ExitProcess FindResourceA GetCPInfo GetCommandLineW GetComputerNameA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentVariableW GetExitCodeProcess GetExitCodeThread GetFileAttributesW GetFileSize GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoW GetTempPathA GetTempPathW GetTickCount HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW LoadResource LockResource Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar OpenProcess Process32FirstW Process32NextW ProcessIdToSessionId QueryFullProcessImageNameW ReadFile RemoveDirectoryW RemoveVectoredExceptionHandler SetConsoleCtrlHandler SetEvent SetFileTime SetUnhandledExceptionFilter SizeofResource Sleep SystemTimeToFileTime TerminateProcess TlsGetValue VirtualAllocEx VirtualFreeEx VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile WriteProcessMemory lstrcatW lstrcpynW

msvcrt

fwprintf _assert __C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _commode _errno _fmode _initterm _setmode _wcmdln _wcsicmp _wcsnicmp abort atexit calloc exit fflush fprintf fputc fputwc free localeconv malloc memcpy memmove memset rand realloc setvbuf signal srand strerror strlen strncmp toupper vfprintf wcscat_s wcscpy_s wcslen wcsncat_s wcsncmp wcsrchr wcsstr wcstombs _fileno

ole32

CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SysAllocString SysFreeString

shell32

ShellExecuteExW

Name

.text

Size

106KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4.8MB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Trojan.Siggen34.22534.8995.17333.exe

PE Signature issue

advapi32

bcrypt

kernel32

msvcrt

ole32

oleaut32

shell32

generic