PAGO BBVA-15-08-24[.]exe

General

Target
PAGO BBVA-15-08-24.exe
Size 427KB
Sample240816-s7lzfsshkc
SHA256 158363d522e8df85c58ade3d6ca67df06df8453dc33558b2130d218849879493
MD5 785eddc0dfd5e89b886f03c4aeba5bf3
SHA1 914d0227615a61431a1fcf713e0e069024bcacee
SHA512 b9275f96c829f20b089919aaf680f1d4e893599daa4780ed3c529ddc8bc391404c869707d19f6c7da756e9bdc75c3de86096af86c84861e19a3b906efae953cb
SSDEEP 6144:Rm4cl1kWWwWeE1/kVPYyS6K2Ga6TrNxln/L9T9t3Bcl1Lq62RjzTda/Hgn2Im41v:RA7maY0KVaCJnZT9HcO/3QPkEwWJEl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PAGO BBVA-15-08-24.exe

File Explorer

PAGO BBVA-15-08-24.exe

.exe 427KB

PAGO BBVA-15-08-24.exe

SHA256 158363d522e8df85c58ade3d6ca67df06df8453dc33558b2130d218849879493
MD5 785eddc0dfd5e89b886f03c4aeba5bf3
SHA1 914d0227615a61431a1fcf713e0e069024bcacee
SHA512 b9275f96c829f20b089919aaf680f1d4e893599daa4780ed3c529ddc8bc391404c869707d19f6c7da756e9bdc75c3de86096af86c84861e19a3b906efae953cb
SSDEEP 6144:Rm4cl1kWWwWeE1/kVPYyS6K2Ga6TrNxln/L9T9t3Bcl1Lq62RjzTda/Hgn2Im41v:RA7maY0KVaCJnZT9HcO/3QPkEwWJEl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\BHh8776.pdb

Sharing

General

Malware Config

Signatures

File Explorer

PAGO BBVA-15-08-24.exe

generic