Static task
static1
Behavioral task
behavioral1
Sample
Pago-202308036300.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Pago-202308036300.pdf.exe
Resource
win10v2004-20230221-en
General
-
Target
8B0486E35F922C1CEB3C280D66253CAA29250E855863D0ECF603A748167F518C
-
Size
447KB
-
MD5
101263f03c7dfb228489431c9c7e5298
-
SHA1
a9543c0eed624690e7d5222f886079126d6d3e5b
-
SHA256
8b0486e35f922c1ceb3c280d66253caa29250e855863d0ecf603a748167f518c
-
SHA512
c2eb870965075c46152e3586be94d9b87e2a12fa256e34c4e1fc68a3805aa9169e21fb2258c816a0841e5353377a7e6f2ef3f851d297aa2953d7928ca3448c8f
-
SSDEEP
12288:67g1gx3KOySmRPmyEYp+mtH4BqIan8lw6xs5iLzDQp7u:67g143jXmNmuH4Ro8lwwsSzC7u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Pago-202308036300.pdf.exe
Files
-
8B0486E35F922C1CEB3C280D66253CAA29250E855863D0ECF603A748167F518C.rar
-
Pago-202308036300.pdf.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ