3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad

Sharing

Copy URL Twitter E-mail

General

Target
3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad
Size 1.2MB
Sample260830-137pcss1ht
SHA256 3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad
MD5 8decbc7e174add84d6b2f98cb75f4f0b
SHA1 48388da46a6af9549e01ceff81d566e26cfef047
SHA512 fe323327ce812edc827eca43adfa0291b11191f3aacfc61b63577813e3bcd1efb62d4ec0adf3f5f9a2950837c3f70928f8c4e587c8620a54ff3129cba606e63c
SSDEEP 24576:AAGDeJQ0CY1T9/ZUC7NfRxFpdkffH2u5pZMcsV:3XTAUPxmffHte
TLSH
T1B745C0A77C19C325D93B92B6B0E780D023E95D0C5D6B9BBE175532EF31AC25183B6E08
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad

File Explorer

3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad

.exe 1.2MB

3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad

IMPHASH 17de70812f274b0edd9d0afe69bc7fe2
SHA256 3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad
MD5 8decbc7e174add84d6b2f98cb75f4f0b
SHA1 48388da46a6af9549e01ceff81d566e26cfef047
SHA512 fe323327ce812edc827eca43adfa0291b11191f3aacfc61b63577813e3bcd1efb62d4ec0adf3f5f9a2950837c3f70928f8c4e587c8620a54ff3129cba606e63c
SSDEEP 24576:AAGDeJQ0CY1T9/ZUC7NfRxFpdkffH2u5pZMcsV:3XTAUPxmffHte
TLSH
T1B745C0A77C19C325D93B92B6B0E780D023E95D0C5D6B9BBE175532EF31AC25183B6E08
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1a:23:b4:7d:d6:b2:5e:e6:fa:ee:fa:91:88:d7:7c:2e:6a:cc:28:49

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Digital Plugin S.l.,O=Digital Plugin S.l.,L=Guia de Isora,ST=Santa Cruz de Tenerife,C=ES

Chains

Aug 26, 2026

CN=Digital Plugin S.l.,O=Digital Plugin S.l.,L=Guia de Isora,ST=Santa Cruz de Tenerife,C=ES

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Minor OS version

Major OS version

Entry point

29199

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress VirtualAlloc VirtualAllocEx VirtualFreeEx TerminateProcess GetLastError ReadProcessMemory WriteProcessMemory GetThreadContext ResumeThread LoadResource FreeLibrary LoadLibraryW GetModuleFileNameA GetModuleFileNameW GetModuleHandleW CreateProcessA FindResourceW FindResourceExW MultiByteToWideChar WideCharToMultiByte FreeConsole LockResource InterlockedDecrement SizeofResource InitializeCriticalSectionAndSpinCount LocalFree HeapDestroy CreateFileW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers EncodePointer DecodePointer RaiseException RtlUnwind HeapFree HeapAlloc GetCommandLineW GetStdHandle WriteFile IsProcessorFeaturePresent ExitProcess GetModuleHandleExW HeapSize Sleep IsDebuggerPresent SetLastError InterlockedIncrement GetCurrentThreadId GetProcessHeap HeapReAlloc GetFileType DeleteCriticalSection GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree OutputDebugStringW LoadLibraryExW LCMapStringW EnterCriticalSection LeaveCriticalSection IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

ole32

CoInitializeEx CoSetProxyBlanket CoCreateInstance CoInitializeSecurity CoUninitialize

oleaut32

SysFreeString VariantClear

shlwapi

PathFindFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

3220ba1009f49c9d17d056215bbec0f854f910799073abe2b9ee1674a0f438ad

PE Signature issue

kernel32

advapi32

ole32

oleaut32

shlwapi

generic