Static task
static1
Behavioral task
behavioral1
Sample
documento_00339-2022.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
documento_00339-2022.exe
Resource
win10v2004-20221111-en
General
-
Target
documento_00339-2022.exe
-
Size
1.8MB
-
MD5
01d8dae0deb6f48937b39331a09c0d60
-
SHA1
694d867c96a740e596210bcd56702f7aa9c3fbd6
-
SHA256
f514046e4c9bd5d140aa2c17b466ffa1805d41ca46e942db1546a298cd80c919
-
SHA512
86fd1dd92aa6bdb761738193639ed0caded137ffa709c1075caf26e7f7b1f179171c98ed9ffc1f0c351b4bdf69d357ed0cf7e1828ee5f3f96f47e175beac647c
-
SSDEEP
24576:qsYuuI338K31I38dU01xRor7miL+Z+4voXN:PmK31IARqXrH9
Malware Config
Signatures
Files
-
documento_00339-2022.exe.exe windows x86
fd8c8738a57efa843cca603a3053d799
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
HeapFree
HeapAlloc
GetProcessHeap
GetVersionExW
InterlockedExchange
FreeLibraryAndExitThread
GetFileAttributesW
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
IsWow64Process
GetCurrentProcess
GetModuleFileNameW
LocalFree
LocalReAlloc
LocalAlloc
GetProfileStringW
lstrlenW
CompareStringW
ApplicationRecoveryInProgress
ApplicationRecoveryFinished
RegisterApplicationRecoveryCallback
RegisterApplicationRestart
CompareFileTime
SystemTimeToFileTime
GetTempFileNameW
FileTimeToSystemTime
DeleteFileW
CreateFileW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
GetTimeZoneInformation
SetFilePointerEx
DelayLoadFailureHook
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileAttributesExW
CreateProcessW
CreateProcessA
GetExitCodeProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
GetTimeFormatW
SetConsoleCtrlHandler
WaitForSingleObjectEx
WriteConsoleW
OutputDebugStringW
GetFileType
HeapQueryInformation
GetCurrentThread
GetACP
ExitProcess
WriteFile
GetStdHandle
GetModuleHandleExW
GetModuleFileNameA
GetSystemInfo
HeapValidate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
VirtualQuery
GetStartupInfoW
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
CompareStringEx
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
FormatMessageA
FreeLibrary
LoadLibraryW
GetProcAddress
GetLocaleInfoEx
lstrcmpiW
GetPrivateProfileStringW
WritePrivateProfileStringW
InterlockedIncrement
GetDateFormatW
GetLocaleInfoW
GetLocalTime
MultiByteToWideChar
InterlockedDecrement
GetLastError
GlobalFindAtomW
MulDiv
GlobalSize
GlobalLock
GlobalUnlock
GlobalAlloc
lstrcmpW
ResetEvent
SetEndOfFile
CreateEventW
CreateThread
WaitForSingleObject
CloseHandle
InterlockedCompareExchange
SetEvent
GetSystemTime
GetModuleHandleW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
OutputDebugStringA
GetStartupInfoA
WideCharToMultiByte
lstrlenA
VirtualProtect
VirtualAlloc
ReadConsoleW
Sleep
user32
GetParent
SetWindowTextW
LoadStringW
SetFocus
EnableWindow
GetClientRect
GetWindowTextLengthW
LoadAcceleratorsW
IsDialogMessageW
GetKeyState
SetCursor
LoadCursorW
ShowWindow
LoadImageW
UnregisterClassA
GetWindowTextW
FillRect
CheckMenuRadioItem
MessageBoxA
GetSysColor
SetClassLongW
SendMessageW
SetWindowPos
GetWindowRect
CreateWindowExW
GetClassNameW
MapWindowPoints
DestroyWindow
EnableMenuItem
GetClassLongW
DrawMenuBar
SetMenuItemInfoW
AppendMenuW
RemoveMenu
GetSubMenu
GetWindowLongW
InsertMenuItemW
SetWindowLongW
IsWindowEnabled
PostMessageW
CharNextA
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
GetMenuState
IsClipboardFormatAvailable
DefWindowProcW
InvalidateRect
PostQuitMessage
GetFocus
DispatchMessageW
TranslateMessage
GetMessageExtraInfo
MessageBeep
SystemParametersInfoW
DialogBoxParamW
GetDlgItem
GetWindowPlacement
TranslateAcceleratorW
GetMessageW
SetForegroundWindow
GetSystemMetrics
SetWindowPlacement
RegisterClassExW
DrawTextW
ReleaseDC
EndDialog
FindWindowW
GetAncestor
CreatePopupMenu
TrackPopupMenu
CreateDialogParamW
GetProcessDefaultLayout
EnumDesktopWindows
GetClassWord
MonitorFromRect
EqualRect
EnumDisplayMonitors
IntersectRect
CopyRect
MonitorFromWindow
GetMonitorInfoW
OffsetRect
GetNextDlgTabItem
CheckMenuItem
SetDlgItemInt
GetDlgItemInt
MoveWindow
IsDlgButtonChecked
SendDlgItemMessageW
UpdateWindow
CheckRadioButton
GetMenu
SetPropW
EnumChildWindows
GetDC
gdi32
SetBkColor
GetStockObject
SetBkMode
SetTextColor
EqualRgn
CreateDIBSection
DeleteObject
DeleteDC
GetTextExtentPointW
CreateFontIndirectW
CreateCompatibleDC
GetDeviceCaps
GetRgnBox
CreateSolidBrush
GetTextMetricsW
GetTextExtentPoint32W
GetObjectW
LineTo
MoveToEx
ExtCreatePen
CreateCompatibleBitmap
CreateRectRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
CreatePatternBrush
SelectObject
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
RegGetValueW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
OpenSCManagerW
OpenServiceW
EventRegister
EventUnregister
EventWrite
RegCloseKey
RegCreateKeyExW
CloseServiceHandle
QueryServiceConfigW
RegOpenKeyExW
shell32
ShellAboutW
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteExW
ole32
CoUninitialize
CoInitialize
CoCreateInstance
comctl32
ImageList_Create
ImageList_Destroy
PropertySheetW
ImageList_LoadImageW
ImageList_SetBkColor
CreatePropertySheetPageW
ImageList_Add
gdiplus
GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipSetSmoothingMode
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCreatePen1
GdipDeletePen
GdipDrawLineI
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateSolidFill
GdipSetPageUnit
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipCloneBrush
GdipFillRectangleI
GdipDrawArcI
GdipDeleteGraphics
rpcrt4
UuidCreate
I_UuidCreate
UuidToStringW
RpcStringFreeW
uxtheme
IsThemeActive
version
VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
winmm
timeGetTime
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 429KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ