Static task
static1
Behavioral task
behavioral1
Sample
MensajePdf_____________________________________________________________.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
MensajePdf_____________________________________________________________.exe
Resource
win10v2004-20220812-en
General
-
Target
ec07de066b60552dcd3a9abfab35d3afb300122fb346750aba618dab059bfa23
-
Size
253KB
-
MD5
ca52ca2061304bcb88c932b1b28c0332
-
SHA1
93f3261590daf4b8d588cba095d55045820d1414
-
SHA256
ec07de066b60552dcd3a9abfab35d3afb300122fb346750aba618dab059bfa23
-
SHA512
3f1395e13567f25ecc60913a4e5ab459c39e8ce9cc2122e66cc1ce646b4197cd5e6f1049a78cdc1488bd3808f018f3c42c16175c5554e046b703a1ead8cab750
-
SSDEEP
6144:oFiLGLdtaJip+TI5FQZwgpR+tEJjJ/yDb4QmfKMLj2Y:DLGBtaJlc5RgitE51yf4QmfKQ
Malware Config
Signatures
Files
-
ec07de066b60552dcd3a9abfab35d3afb300122fb346750aba618dab059bfa23.zip
-
MensajePdf_____________________________________________________________.exe.exe windows x86
ee82e2a05bfcddba978488d896fc5e7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
LoadLibraryW
TlsAlloc
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
CloseHandle
GetTimeZoneInformation
FlushFileBuffers
GetConsoleMode
GetProfileIntA
WriteFile
SetFilePointer
GetOverlappedResult
ExitProcess
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
GetFileType
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleW
CreateFileW
CompareStringW
LocalFree
OutputDebugStringA
WriteProfileStringA
GetProfileStringA
LocalAlloc
LoadLibraryA
TlsGetValue
GetLastError
lstrcatA
HeapCreate
GlobalAlloc
GetCommandLineA
GetProcessHeap
GlobalLock
HeapAlloc
lstrcmpA
GetStdHandle
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCPInfo
SetEnvironmentVariableA
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
GetConsoleCP
GlobalUnlock
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
HeapFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
GetFileSize
user32
GetSystemMetrics
OpenClipboard
GetMenuItemCount
IsWindowVisible
InsertMenuA
SetWindowTextA
LoadImageA
CountClipboardFormats
UpdateWindow
SetClipboardData
SetWindowPos
GetDlgItem
SetClassLongA
FindWindowA
DialogBoxParamA
GetDialogBaseUnits
CheckDlgButton
EndPaint
ClientToScreen
CloseClipboard
GetClassNameA
GetSystemMenu
SetTimer
GetWindowRect
PostQuitMessage
KillTimer
DrawTextA
LoadBitmapA
GetParent
LoadIconA
MessageBeep
wsprintfA
FindWindowExA
WindowFromPoint
GetClientRect
SendMessageA
BeginPaint
GetIconInfo
GetUpdateRect
GetForegroundWindow
GetCursorInfo
GetAsyncKeyState
SetWindowLongA
MessageBoxA
InvalidateRect
BringWindowToTop
GetWindowLongA
EmptyClipboard
gdi32
MoveToEx
BitBlt
LineTo
SetTextColor
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
Ellipse
CreatePen
TextOutW
CreateSolidBrush
TextOutA
GetBitmapBits
advapi32
LsaNtStatusToWinError
LsaFreeMemory
RegCloseKey
LsaQueryInformationPolicy
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
CoInitialize
CoCreateInstance
netapi32
NetLocalGroupEnum
NetApiBufferFree
comctl32
ord17
rpcrt4
RpcErrorStartEnumeration
gdiplus
GdipLoadImageFromFile
GdipDeleteGraphics
GdipDisposeImage
GdipCloneImage
GdipCreateFromHWND
GdipFree
GdipAlloc
uxtheme
CloseThemeData
DrawThemeBackground
GetWindowTheme
authz
AuthzInitializeResourceManager
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ