e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422

Sharing

Copy URL Twitter E-mail

General

Target
e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422
Size 1.3MB
Sample260828-sql8wszsax
SHA256 e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422
MD5 5691406ba93abf53407bf02c30c8d002
SHA1 4818d8e4dd78ec7fbe96e39737a98e23ed541e37
SHA512 3b02b0504a99d86655dd3136aeb882ceb992408aae37ef7b8960ec6a7730d99e1d50bea5fa8eb405d8ed3ed4cae3a54936c99696d6455306d4b6b9e1856d0791
SSDEEP 24576:w8maeLsj74Tl3ZvYbIwhtdAP/zy1ilLShKOWBGF7UYCtftv29Xfy:w8CJeMwhtO/zk0K8f/He6
TLSH
T15165F18439C848B5FD820CB35476A10486C5B9E48BE174CE37A32A5BFF16E91B737972
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422

File Explorer

e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422

.exe 1.3MB

e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422

IMPHASH 25ede10343b691ef6250a90568027455
SHA256 e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422
MD5 5691406ba93abf53407bf02c30c8d002
SHA1 4818d8e4dd78ec7fbe96e39737a98e23ed541e37
SHA512 3b02b0504a99d86655dd3136aeb882ceb992408aae37ef7b8960ec6a7730d99e1d50bea5fa8eb405d8ed3ed4cae3a54936c99696d6455306d4b6b9e1856d0791
SSDEEP 24576:w8maeLsj74Tl3ZvYbIwhtdAP/zy1ilLShKOWBGF7UYCtftv29Xfy:w8CJeMwhtO/zk0K8f/He6
TLSH
T15165F18439C848B5FD820CB35476A10486C5B9E48BE174CE37A32A5BFF16E91B737972
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c0:07:82:33:dd:8c:92:a3:77:bc:74:6e:b8:ed:aa:a5:ad:86:74:37

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Digital Plugin S.l.,O=Digital Plugin S.l.,L=Guia de Isora,ST=Santa Cruz de Tenerife,C=ES

Chains

Aug 26, 2026

CN=Digital Plugin S.l.,O=Digital Plugin S.l.,L=Guia de Isora,ST=Santa Cruz de Tenerife,C=ES

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Minor OS version

Major OS version

Entry point

32176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection GetCurrentProcess GetModuleFileNameW WideCharToMultiByte TerminateProcess ResumeThread CreateProcessA GetThreadContext VirtualAlloc VirtualAllocEx VirtualFreeEx RaiseException WriteProcessMemory FindResourceExW FreeLibrary GetModuleFileNameA GetModuleHandleW GetProcAddress LoadResource LockResource SizeofResource LoadLibraryW FindResourceW MultiByteToWideChar FreeConsole OutputDebugStringW EnterCriticalSection LeaveCriticalSection LocalFree DecodePointer CheckRemoteDebuggerPresent ReadProcessMemory IsDebuggerPresent CreateFileW WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers GetStringTypeW GetCommandLineW EncodePointer RtlUnwind SetLastError GetCurrentThreadId ExitProcess GetModuleHandleExW GetStdHandle GetFileType GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo LoadLibraryExW LCMapStringW CloseHandle

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

ole32

CoSetProxyBlanket CoCreateInstance CoInitializeSecurity CoInitializeEx

oleaut32

SysAllocStringByteLen SysStringByteLen SysFreeString VariantClear

shlwapi

PathFindFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

e1e22745a02861ff184eb907ba08fcdfc18f2683ad6bc80455ee4d7b0f887422

PE Signature issue

kernel32

advapi32

ole32

oleaut32

shlwapi

generic