Gridinsoft Logo
File Icon

The Sigma.exe File Analysis

Updated 2 months ago
Checked by Malware Check
Sigma.exe

Technical Analysis

File Name Sigma.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (console) x86-64, for MS Windows
SSDEEP Hash
196608:TYhJmdGSHHoQKb2qHg4SiknPvd3bAQdfJq6vuv:8hwdra9AMkPvNMQR0muv
Scanner Version 1.0.227.174
Database Version 2025-10-20 04:00:26 UTC
⚠

Suspicious File Detected

Detected by 49 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
68%
Detection Rate
8,172,544
File Size (bytes)
49/72
Engines Detected
2025-10-20
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
6314b1b2732ed903f463cae5a96d2a44
SHA1
d6e6b4af8a7c6e1cb1ecb1f8b995af72518ed799
SHA256
5478052f09def0ac24c3f15d22d433d8bcc799ca604fd439cabd3b412ee5293b
SHA512
9ca38944057d034433cfbcb1a3f4eeea51ff77b612fdd1868282c46bbe0fed1ef971ccc6d2b6fca872d1275ac776fbd16120fe1f6182b346d937bc8e0470b8f4
ImpHash
28863632cd896c2bc373e193ae3e10d4

Security Engines with Detections (49 of 72)

Lionic
Trojan.Win32.Generic.4!c Malicious
tehtris
Generic.Malware Malicious
MicroWorld-eScan
Trojan.GenericKD.77358829 Malicious
CTX
exe.trojan.genkryptik Malicious
CAT-QuickHeal
Trojan.Ghanarava.17602579626d2a44 Malicious
Skyhigh
BehavesLike.Win64.Generic.wc Malicious
ALYac
Trojan.GenericKD.77358829 Malicious
Malwarebytes
Malware.AI.1083510247 Malicious
VIPRE
Trojan.GenericKD.77358829 Malicious
Sangfor
Trojan.Win64.Kryptik.Vv2n Malicious
CrowdStrike
win/malicious_confidence_100% (W) Malicious
BitDefender
Trojan.GenericKD.77358829 Malicious
K7GW
Trojan ( 005cdf041 ) Malicious
K7AntiVirus
Trojan ( 005cdf041 ) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
Elastic
malicious (moderate confidence) Malicious
ESET-NOD32
a variant of Win64/GenKryptik.HLRW Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09IK25 Malicious
Paloalto
generic.ml Malicious
Cynet
Malicious (score: 99) Malicious
Alibaba
Trojan:Win64/GenKryptik.985f66a7 Malicious
ViRobot
Trojan.Win.Z.Agent.8172544 Malicious
Tencent
Malware.Win32.Gencirc.10c3f525 Malicious
Sophos
Mal/Generic-S Malicious
F-Secure
Trojan.TR/Crypt.Agent.eokmo Malicious
Zillya
Trojan.GenKryptik.Win64.57520 Malicious
McAfeeD
ti!5478052F09DE Malicious
Trapmine
malicious.moderate.ml.score Malicious
Emsisoft
Trojan.GenericKD.77358829 (B) Malicious
Ikarus
Trojan.Win64.Agent Malicious
GData
Trojan.GenericKD.77358829 Malicious
Jiangmin
Trojan.Agent.fdmk Malicious
Varist
W64/ABTrojan.EHPE-6884 Malicious
Avira
TR/Crypt.Agent.eokmo Malicious
Arcabit
Trojan.Generic.D49C66ED Malicious
Microsoft
Trojan:Win32/Kepavll!rfn Malicious
Google
Detected Malicious
AhnLab-V3
Malware/Win.Lazy.R727489 Malicious
DeepInstinct
MALICIOUS Malicious
Cylance
Unsafe Malicious
APEX
Malicious Malicious
Rising
Trojan.Kryptik!8.8 (TFE:5:eNlmRSfhNcR) Malicious
Yandex
Trojan.GenKryptik!7rdfRAEnXQk Malicious
TrellixENS
Artemis!6314B1B2732E Malicious
MaxSecure
Trojan.Malware.345033516.susgen Malicious
Fortinet
W64/GenKryptik.HLRW!tr Malicious
AVG
Win64:MalwareX-gen [Misc] Malicious
Avast
Win64:MalwareX-gen [Misc] Malicious
alibabacloud
Trojan:Win/Wacatac.B9nj Malicious
23 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 062722999f0193421cbf7f0f6a2838c2
Fuzzy: acfd77f2917b7dea13d3b83f5fab49ab
dHash: 585cfa6cb4b48098
Image Base 0x140000000
Entry Point 0x141155150
Compilation Time 2025-09-15 18:57:47
Checksum 0x00000000 (Actual: 0x007ccd30)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 9 libraries
ADVAPI32, bcrypt, CRYPT32, dbghelp, IPHLPAPI, KERNEL32, Secur32, USER32, WS2_32
Exports 0 functions
Resources 12 Resources
Sections 3 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
UPX0 0x00001000 10,133,504 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
UPX1 0x009ab000 8,040,448 bytes 8,038,400 bytes 7.89 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C6A7154B50CB94CE78825F6BA0088978
.rsrc 0x01156000 135,168 bytes 133,632 bytes 3.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 8926E6A4F00CDAF94137F5E388AD25DB
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 12 (10,855,260 bytes)
Resource Type Count Total Size Percentage
RT_ICON 5 131,720 bytes
1.2%
RT_RCDATA 5 10,723,141 bytes
98.8%
RT_GROUP_ICON 1 76 bytes
0%
RT_MANIFEST 1 323 bytes
0%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
49 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware