Static task
static1
Behavioral task
behavioral1
Sample
PAGO SWIFT pdf.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
PAGO SWIFT pdf.exe
Resource
win10v2004-20241007-en
General
-
Target
ed1420f9f2247b8c6d968787af2dc71266abd66a282f7103a6525113e3084a59
-
Size
584KB
-
MD5
b1252ec208fb9065afc44c43da6b258f
-
SHA1
da465232b8083749cf0c2702c3babe3880cee83a
-
SHA256
ed1420f9f2247b8c6d968787af2dc71266abd66a282f7103a6525113e3084a59
-
SHA512
6f5a5206c851585e738c45a8a74112f9d564ef89e3646c0319aa29e2b93b6be821afec71b8c2d2bd5d67457c685a2f6bb6faf52b8086067e20acc1c776cb1ef5
-
SSDEEP
12288:F/zbniaP9LTnr5FMQbi7SSZ++SGsOwk8pT+UZFvTPsBiOm25UFgcBZT3O5:F/viaPVnr5FMQbi7SSuOwk2dLsNo/BZG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PAGO SWIFT pdf.exe
Files
-
ed1420f9f2247b8c6d968787af2dc71266abd66a282f7103a6525113e3084a59.zip
-
PAGO SWIFT pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 867KB - Virtual size: 866KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ