Overview

overview

7

Static

static

3

bigImgPin_...up.exe

windows10-2004-x64

7

bigImgPin_...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

bigimgpin.exe

windows10-2004-x64

6

bigimgpin.exe

windows11-ltsc_2024-x64

6

vips-win64...og.vbs

windows10-2004-x64

5

vips-win64...og.vbs

windows11-ltsc_2024-x64

5

vips-win64..._1.dll

windows10-2004-x64

1

vips-win64..._1.dll

windows11-ltsc_2024-x64

1

vips-win64..._1.dll

windows10-2004-x64

1

vips-win64..._1.dll

windows11-ltsc_2024-x64

1

vips-win64...10.dll

windows10-2004-x64

1

vips-win64...10.dll

windows11-ltsc_2024-x64

1

vips-win64..._1.dll

windows10-2004-x64

1

vips-win64..._1.dll

windows11-ltsc_2024-x64

1

vips-win64...om.dll

windows10-2004-x64

1

vips-win64...om.dll

windows11-ltsc_2024-x64

1

vips-win64...13.dll

windows10-2004-x64

1

vips-win64...13.dll

windows11-ltsc_2024-x64

1

vips-win64...on.dll

windows10-2004-x64

1

vips-win64...on.dll

windows11-ltsc_2024-x64

1

vips-win64...ec.dll

windows10-2004-x64

1

vips-win64...ec.dll

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 00:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    bigImgPin_0.2.1_x64-setup.exe
  • Size 14.9MB
  • Sample261102-a529js1x7m
  • SHA256 b6a5936e61b2185e686f09a0d744c8a2a9c9198ac53a9c21d5fbb9616b84bc4e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bigImgPin_0.2.1_x64-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\bigImgPin_0.2.1_x64-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:3224

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3706.tmp\System.dll
        • Size 12KB
        • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        modern-wizard.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3706.tmp\modern-wizard.bmp
        • Size 25KB
        • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3706.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis_tauri_utils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3706.tmp\nsis_tauri_utils.dll
        • Size 33KB
        • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bigimgpin.exe
        • Path C:\Users\Admin\AppData\Local\bigImgPin\bigimgpin.exe
        • Size 6.5MB
        • SHA256 832b770745a07873d3e0d433f593b8cf07165cfd9ab4cf8e77600fe07e19ad78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        10-hinting-slight.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\10-hinting-slight.conf
        • Size 620B
        • SHA256 d138eca2bac3f78d45ff7cfb649ad792caa4a6e61f73cea7cf0ea54b091f1ef4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        10-scale-bitmap-fonts.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\10-scale-bitmap-fonts.conf
        • Size 2KB
        • SHA256 df8e99abb6f82384c61978906a45a95794940545da95790d87f01d9391e0894b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        10-sub-pixel-none.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\10-sub-pixel-none.conf
        • Size 647B
        • SHA256 0f00b5cf0ce07062ec65b9b340aa888f6c5fbc215aafebd26781be2d5a13ff6a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        10-yes-antialias.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\10-yes-antialias.conf
        • Size 258B
        • SHA256 e6d82a642d1b37f7d24dc37f938b999f00ff7aa4303b2602d04164d53f221005
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        11-lcdfilter-default.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\11-lcdfilter-default.conf
        • Size 695B
        • SHA256 76aec9d8dac48faabe1bbde9e887cfb09fa45f30be5f8826e945a394a0097e48
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        20-unhint-small-vera.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\20-unhint-small-vera.conf
        • Size 1KB
        • SHA256 278732c68c16177f2aa3c7e4ea318b9f720aee13a433c32eb15ba626806c609d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        30-metric-aliases.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\30-metric-aliases.conf
        • Size 13KB
        • SHA256 3baf25c82e1a14c606d45c212296852be06ae9795d60e84aab573226151450a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        40-nonlatin.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\40-nonlatin.conf
        • Size 7KB
        • SHA256 f5f15e22979e2c98b8446706a24b44a904ef46e369052f9d3e738cd6e864a4d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        45-generic.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\45-generic.conf
        • Size 3KB
        • SHA256 63fc016a6ef6ad5a6df2caab714822c0cee9a5317c38237e9fbf6cd42f52f514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        45-latin.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\45-latin.conf
        • Size 7KB
        • SHA256 b46e539c25dfd5531c8fcf4f22c3d156b09272ffbc6f8a83a8eeb7431c09aee5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        48-guessfamily.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\48-guessfamily.conf
        • Size 5KB
        • SHA256 f6048ea7d8ed97cc4efef847b98c71ea9d20f16835feb43860b221d40770508e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        48-spacing.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\48-spacing.conf
        • Size 446B
        • SHA256 4395913fda6088c968f3145f5d41374cfe7b020e99445f56d81de91a1b361135
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        49-sansserif.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\49-sansserif.conf
        • Size 1KB
        • SHA256 35b1d7dac8bb9f61a19f5a9f5e16fc6ddff1d0844ac04503a85a54b232a35c67
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        50-user.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\50-user.conf
        • Size 542B
        • SHA256 bc6e31684e4f5e0176200e558a250ff63e9ab0773300f47071223edc320c4c5e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        51-local.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\51-local.conf
        • Size 263B
        • SHA256 dca9d917e1f66f73bfa495943b4d1eaab2d93810a51bc8e600cf4d4e9df03e67
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        60-generic.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\60-generic.conf
        • Size 1KB
        • SHA256 540302fe1576a6de20a3194b64e8090a816ba70cfdb66d61ddbe770aff6e4c23
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        60-latin.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\60-latin.conf
        • Size 2KB
        • SHA256 a4b23d19e5348750ec0c2883b0cbb3f31367b22debe63c4113af389a719484a5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        65-fonts-persian.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\65-fonts-persian.conf
        • Size 9KB
        • SHA256 c675fab143a3638346874798be45f51f6878ebec591b4362d83cfffb828ec4ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        65-nonlatin.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\65-nonlatin.conf
        • Size 9KB
        • SHA256 2a0232e5423f38023efb29b67a95bae982da3c474ec5ec7bbf5b418f42357a50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        69-unifont.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\69-unifont.conf
        • Size 687B
        • SHA256 fa97c0cf5f79d70e2dc3dc48155d4c9220cd7c6a8bc95b89c4ebcc517f97479e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        70-no-bitmaps-except-emoji.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\70-no-bitmaps-except-emoji.conf
        • Size 429B
        • SHA256 bb5df65896bf3011b2f2935b63ab12db1ecf078674ff73a533123445f122a92b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        80-delicious.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\80-delicious.conf
        • Size 437B
        • SHA256 34f27b7fe9cd83b2b6d46f16ef9c477412f2d7ef63634f86b9b38b79bc4f81ad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        90-synthetic.conf
        • Path C:\Users\Admin\AppData\Local\bigImgPin\vips-win64\share\fontconfig\conf.avail\90-synthetic.conf
        • Size 1KB
        • SHA256 cdd0aac7840c664a7127b64db66bdfe8dc22be3774d10bc22f4a41c98de5d85e
        • MD5 SHA1 SHA512 TLSH
        Submit Download