Static task
static1
Behavioral task
behavioral1
Sample
BBVA__Aviso_de_Pago_pdf.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
BBVA__Aviso_de_Pago_pdf.exe
Resource
win10v2004-20240508-en
General
-
Target
BBVA__Aviso_de_Pago_pdf.pif
-
Size
46KB
-
MD5
c34b58d960ea87eec970a9333c7f9292
-
SHA1
ca23b1d2418edc91a2a49968738ce09a6f7bbfc6
-
SHA256
8b3aa60f494833274c18171586730f2f4650a0c8c2de4cd901d853948b6f1fce
-
SHA512
e1dc12741f2448059aeb99be1f6e0df91bb4ee655b3be892ecc027842e78c39b3388cb5748dbac8b56f8ad245312194159522619b26c6775f558b72245c64aab
-
SSDEEP
768:LDpDj/nau11+B1Z9wg4MYVctOi3FaKMUXF1x2ySCtk7PHqAk:HpvnaK1+ZWg4MYVcAKMUX/x26qHVk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource BBVA__Aviso_de_Pago_pdf.pif
Files
-
BBVA__Aviso_de_Pago_pdf.pif.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ