PAGOBBVA[.]exe | Triage

Sharing

General

Target

PAGOBBVA.exe
Size

453KB
MD5

4a8bbe41742eb94b10c78c73fe4705bc
SHA1

148fcb4eb2980395abc13ee22938f25512c98c60
SHA256

5187b43c423b583482a775825ab8d8723d01407529263926fdf38eb0704e2d16
SHA512

644ac5a970f48efeade4dc951aac588cb502db4f821c49730157ed08503b425b2ddd239e87535bcaaa7a7ee8850ba0946694afd36011bd0114f8d8abb21bcaab
SSDEEP

12288:CvKdI186M396rOIfqaR9U7cD5nbHv4SBwTm:i1HFfqafecD9rkm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PAGOBBVA.exe

Files

PAGOBBVA.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\NJNhH887.pdb

Sections

.text
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ