Malicious PDF — malware analysis report

Static analysis result for SHA-256 ec8e383645476eda…

MALICIOUS

PDF

121.0 KB Created: 2007-11-07 14:46:13 +01:00 Authoring application: Adobe Designer 7.0 First seen: 2015-10-01
MD5: c237375028c7d4f956b6ed72b4cf1656 SHA-1: 9a8ef5c5d50e8b9011791df1954f879d690f98cd SHA-256: ec8e383645476edabe929cb57d7b0bed0cd478fdfdf0a2a1d84ff303a79af354
236 Risk Score

Malware Insights

MITRE ATT&CK
T1204.002 Malicious File T1059.001 PowerShell

This PDF document contains XFA form elements which are known to be vulnerable to heap spray attacks. The presence of JavaScript, specifically heap-spray exploit code and String.fromCharCode usage, indicates an attempt to execute arbitrary code. The embedded file 'embedded_file_obj0093.bin' is likely the secondary payload. The ML classifier strongly suggests maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9981

Heuristics 10

  • XFA form contains risky executable script high CVE related PDF_XFA_SCRIPT
    PDF embeds an XFA form whose script block contains exploit, submission/launch, or shell-execution primitives. Ordinary LiveCycle print/update scripts are left as generic XFA/JS signals unless stronger behavior is present.
  • XFA JavaScript heap-spray exploit code critical PDF_XFA_HEAP_SPRAY
    PDF contains XFA script content with heap-spray or shellcode-like JavaScript markers such as large encoded word sequences, util.pack, large arrays, or spray variable names. This is a weaponised Adobe Reader exploit pattern, not a normal interactive form.
  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
     console.println("[esCaracterCifOK] - CODIGO CARACTER CONTROL: " + codigoCar);
     console.println("[esCaracterCifOK] - CARACTER CONTROL: " + String.fromCharCode(codigoCar + 64));
     if ((codigoCar == cif.charAt(cif.length -1)) || (String.fromCharCode(codigoCar + 64) == cif.charAt(cif.length -1))) {
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Embedded file low PDF_EMBEDDED
    PDF embeds a file attachment — could carry an executable or another weaponised document as a nested payload
  • XFA form low PDF_XFA
    PDF uses XML Forms Architecture — can contain script logic
  • Embedded script payload in PDF stream info PDF_EMBEDDED_SCRIPT_PAYLOAD
    PDF stream bytes contain an HTML/XFA <script> tag without accompanying Windows shell-execution primitives — common in accessible XFA forms but worth surfacing for analyst review.
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.w3.org/1999/02/22-rdf-syntax-ns# Referenced by PDF JavaScript
    • http://ns.adobe.com/xap/1.0/Referenced by PDF JavaScript
    • http://ns.adobe.com/xap/1.0/mm/Referenced by PDF JavaScript
    • http://purl.org/dc/elements/1.1/Referenced by PDF JavaScript
    • http://ns.adobe.com/pdf/1.3/Referenced by PDF JavaScript
    • http://cgi.adobe.com/special/acrobat/updateReferenced by PDF JavaScript
    • http://ns.adobe.com/xdp/Referenced by PDF JavaScript
    • http://www.xfa.org/schema/xci/1.0/Referenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-template/2.2/Referenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-template/2.1/Referenced by PDF JavaScript
    • http://www.w3.org/1999/xhtmlReferenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-data/1.0/Referenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-locale-set/2.1/Referenced by PDF JavaScript
    • http://ns.adobe.com/xtd/Referenced by PDF JavaScript
    • http://ns.adobe.com/xfdf/Referenced by PDF JavaScript

Extracted artifacts 12

Files carved from inside the sample during analysis.

FilenameKindSourceSize
embedded_file_obj0091.bin pdf-embedded-file PDF EmbeddedFile object 91 at offset 0x8036 85 bytes
SHA-256: c06dcd026a7ea0536b63e07ce688691b585339a3ab7ff59065e546b56308c7bb
embedded_file_obj0092.bin pdf-embedded-file PDF EmbeddedFile object 92 at offset 0x80E8 1684 bytes
SHA-256: 7b5a71936821706679c2b9b6fb2f8ebb2e54fe61a70688782204c9a03208e762
embedded_file_obj0093.bin pdf-embedded-file PDF EmbeddedFile object 93 at offset 0x83EE 266099 bytes
SHA-256: 08bd587e2bd1ca7465a6b54fbebd950e7c0005683aae408efa7e56a7898366de
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 2 eval/decoder/string-building token(s).
embedded_file_obj0094.bin pdf-embedded-file PDF EmbeddedFile object 94 at offset 0x1C69E 2304 bytes
SHA-256: 3907b446b011f8610a82acd8de23d89f1d2e4d3687e008fa4fc67993a8207d64
embedded_file_obj0095.bin pdf-embedded-file PDF EmbeddedFile object 95 at offset 0x1C99E 1497 bytes
SHA-256: ba5dad9f84d43b5e8f5a0465ec8aef82999eafc36f58b3afda5c0fdf63237aff
embedded_file_obj0096.bin pdf-embedded-file PDF EmbeddedFile object 96 at offset 0x1CAD7 212 bytes
SHA-256: 57045217c453d4674a08ad8778674bf199a7989a9505424a1815c016e6bb412f
embedded_file_obj0097.bin pdf-embedded-file PDF EmbeddedFile object 97 at offset 0x1CBCE 724 bytes
SHA-256: e7f4bd3bb82d99144e0387be82f69c35083d564a7334738faefc8c9b8cda268c
embedded_file_obj0098.bin pdf-embedded-file PDF EmbeddedFile object 98 at offset 0x1CDAE 85 bytes
SHA-256: a60265344cf1a9e94da34c8f587f64a4297e2fa417c895852209903ab7588bcc
javascript_obj0083_000.js pdf-javascript-stream PDF /JS object 83 at offset 0x786B 870 bytes
SHA-256: 4a1aca004cf20431c9a66dce85404a6411a54d881a6c257882260ffc972a13eb
Preview script
First 1,000 lines of the extracted script
if (typeof(ADBE.Reader_Value_Asked) == "undefined")
   ADBE.Reader_Value_Asked = false;
if (typeof(ADBE.Viewer_Value_Asked) == "undefined")
   ADBE.Viewer_Value_Asked = false;
if (typeof(ADBE.Reader_Need_Version) == "undefined" || ADBE.Reader_Need_Version < 7.0)
{
   ADBE.Reader_Need_Version = 7.0;
   ADBE.Reader_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
   ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&w=" + "XFA1_6";
}
if (typeof(ADBE.Viewer_Need_Version) == "undefined" || ADBE.Viewer_Need_Version < 7.0)
{
   ADBE.Viewer_Need_Version = 7.0;
   ADBE.Viewer_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
   ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&w=" + "XFA1_6";
}
javascript_obj0085_001.js pdf-javascript-stream PDF /JS object 85 at offset 0x79EF 3334 bytes
SHA-256: 6eb244f53ebc8f25f5c57b1b6967c137506ad30fcad0035c0d792b516a9ab880
Preview script
First 1,000 lines of the extracted script
if (typeof(this.ADBE) == "undefined")
   this.ADBE = new Object();
ADBE.LANGUAGE = "ENU";
ADBE.Viewer_string_Title = "Adobe Acrobat";
ADBE.Viewer_string_Update_Desc = "Actualización de formularios interactivos de Adobe";
ADBE.Viewer_string_Update_Reader_Desc = "Adobe Reader 7";
ADBE.Reader_string_Need_New_Version_Msg = "Este archivo PDF requiere una versión más reciente de Adobe Reader. Pulse Aceptar para descargar la última versión o consulte al administrador del sistema.";
ADBE.Viewer_Form_string_Reader_601 = "Este formulario PDF requiere una nueva versión de Adobe Reader. Aunque parezca que el formulario funciona correctamente, puede que algunos elementos no funcionen correctamente o no aparezcan. Pulse Aceptar para iniciar la actualización en línea o póngase en contacto con el administrador del sistema.";
ADBE.Viewer_Form_string_Reader_Older = "Este formulario PDF requiere una nueva versión de Adobe Reader. Aunque parezca que el formulario funciona correctamente, puede que algunos elementos no funcionen correctamente o no aparezcan. Pulse Aceptar para obtener información de descarga en línea o póngase en contacto con el administrador del sistema.";
ADBE.Viewer_Form_string_Viewer_601 = "Este formulario PDF requiere una nueva versión de Adobe Acrobat. Aunque parezca que el formulario funciona correctamente, puede que algunos elementos no funcionen correctamente o no aparezcan. Pulse Aceptar para iniciar la actualización en línea o póngase en contacto con el administrador del sistema.";
ADBE.Viewer_Form_string_Viewer_60 = "Este formulario PDF requiere una nueva versión de Adobe Acrobat. Aunque parezca que el formulario funciona correctamente, puede que algunos elementos no funcionen correctamente o no aparezcan. Para obtener más información, copie la siguiente dirección URL (CTRL+C en Windows, Comando-C en Mac) y péguela en el explorador o póngase en contacto con el administrador del sistema. ";
ADBE.Viewer_Form_string_Viewer_Older = "Este archivo PDF requiere una nueva versión de Acrobat. Copie esta dirección URL y péguela en el explorador o póngase en contacto con el administrador del sistema.";
ADBE.Viewer_Form_string_Reader_5x = "Este formulario PDF requiere una nueva versión de Adobe Reader. Sin una versión nueva, puede que se vea el formulario, pero puede que no funcione correctamente. Puede que algunos elementos de formulario no estén visibles. Si hay disponible una conexión a Internet, haga clic en Aceptar para abrir el explorador en una página Web donde puede descargar la última versión.";
ADBE.Viewer_Form_string_Reader_6_7x = "Este formulario PDF requiere una nueva versión de Adobe Reader. Sin una versión nueva, puede que se vea el formulario, pero puede que no funcione correctamente. Puede que algunos elementos de formulario no estén visibles. Si hay disponible una conexión a Internet, haga clic en Aceptar para descargar e instalar la última versión.";
ADBE.Viewer_Form_string_Viewer_7x = "Este formulario PDF requiere una nueva versión de Adobe Acrobat. Sin una versión nueva, puede que se vea el formulario, pero puede que no funcione correctamente. Puede que algunos elementos de formulario no estén visibles. Si hay disponible una conexión a Internet, haga clic en Aceptar para descargar e instalar la última versión.";
javascript_obj0087_002.js pdf-javascript-stream PDF /JS object 87 at offset 0x7D32 1528 bytes
SHA-256: c876171bd867b66b7671fb337ff9e57d18cd15b43d344cf5a7243821300a408a
Preview script
First 1,000 lines of the extracted script
if (typeof(xfa_installed) == "undefined" || typeof(xfa_version) == "undefined" || xfa_version < 2.0)
{
   if (app.viewerType == "Reader")
   {
      if (ADBE.Reader_Value_Asked != true)
      {
         if (app.viewerVersion < 6.0)
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_5x, 1, 1) == 1)
               this.getURL(ADBE.Reader_Value_New_Version_URL + ADBE.SYSINFO, false);
            ADBE.Reader_Value_Asked = true;
         }
         else if (app.viewerVersion < 7.0)
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_601, 1, 1) == 1)
               app.findComponent({cType:"App", cName:"Reader7", cDesc: ADBE.Viewer_string_Update_Reader_Desc});
            ADBE.Reader_Value_Asked = true;
         }
         else
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_6_7x, 1, 1) == 1)
               app.findComponent({cType:"Plugin", cName:"XFA", cDesc: ADBE.Viewer_string_Update_Desc});
            ADBE.Reader_Value_Asked = true;
         }
      }
   }
   else
   {
      if (ADBE.Viewer_Value_Asked != true)
      {
         if (app.viewerVersion < 7.0)
            app.response({cQuestion: ADBE.Viewer_Form_string_Viewer_Older, cDefault: ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, cTitle: ADBE.Viewer_string_Title});
         else if (app.alert(ADBE.Viewer_Form_string_Viewer_7x, 1, 1) == 1)
            app.findComponent({cType:"Plugin", cName:"XFA", cDesc: ADBE.Viewer_string_Update_Desc});
         ADBE.Viewer_Value_Asked = true;
      }
   }
}
deobfuscated.js deobfuscated-js PDF JavaScript deobfuscation pass 503841 bytes
SHA-256: ef642582a702a83b1bc21156695a07040fad0859e0e82babb0749c54a665675b
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 2 eval/decoder/string-building token(s).
Preview script
First 1,000 lines of the extracted script
0 0 0 rg
1 i 
BT
/TT0 1 Tf
0 Tc 0 Tw 0  Ts 100  Tz 0 Tr 10 0 0 10 275.097 790.519 Tm
(ANEXO  III)Tj
/TT1 1 Tf
-2.99 -2.268 Td
(SOLICITUD DE COBRO)Tj
9 0 0 9 84.393 750.982 Tm
(AYUDAS DEL IGAPE PARA LA HABILITACI\323N DE DOS L\315NEAS DE FINANCIACI\323\
N SUBSIDIADA DE)Tj
-2.927 -1.2 Td
(PRODUCCIONES AUDIOVISUALES E INVERSIONES EN BIENES DE EQUIPO, A REALIZAR\
 POR LAS PYMES DEL)Tj
0.617 -1.2 Td
(SECTOR AUDIOVISUAL GALLEGO, INSTRUMENTADAS MEDIANTE CONVENIO DE COLABORA\
CI\323N ENTRE)Tj
21.805 -1.2 Td
(IGAPE-SGR-EEFF)Tj
ET
0 0 0 RG
0 i 0.5 w 10 M 0 j 2 J []0 d 
452.835 705.196 m
452.835 679.685 l
S
1 i 
BT
/TT2 1 Tf
5 0 0 5 50.315 698.441 Tm
(N\272 EXPEDIENTE)Tj
80.787 0.142 Td
(NIF/CIF)Tj
ET
1 1 0.859 rg
58.11 695.984 m
58.11 681.811 l
135.354 681.811 l
135.354 695.984 l
58.11 695.984 l
h
f
0 i 0 J 
58.11 681.811 77.244 14.173 re
S
1 i 
464.882 695.984 m
464.882 681.811 l
542.543 681.811 l
542.543 695.984 l
464.882 695.984 l
h
f
0 i 
464.882 681.811 77.661 14.173 re
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
5 0 0 5 143.149 698.441 Tm
(BENEFICIARIO)Tj
ET
1 1 0.859 rg
150.945 695.984 m
150.945 681.811 l
447.874 681.811 l
447.874 695.984 l
150.945 695.984 l
h
f
0 i 
150.945 681.811 296.929 14.173 re
S
2 J 
141.732 705.196 m
141.732 679.685 l
S
2.03 w 0 J 
48.189 678.976 498.898 26.22 re
S
2.016 w 
47.89 666.929 m
548.804 666.929 l
S
47.89 9.291 m
548.804 9.291 l
S
547.796 667.937 m
547.796 8.283 l
S
48.898 667.937 m
48.898 8.283 l
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 423.779 653.408 Tm
(, con DNI)Tj
-46.152 0.044 Td
(Don/Do\361a)Tj
ET
1 1 0.859 rg
459.213 661.259 m
459.213 647.086 l
531.884 647.086 l
531.884 661.259 l
459.213 661.259 l
h
f
0 i 0.5 w 
459.213 647.086 72.671 14.173 re
S
1 i 
93.543 661.259 m
93.543 647.086 l
419.527 647.086 l
419.527 661.259 l
93.543 661.259 l
h
f
0 i 
93.543 647.086 325.984 14.173 re
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 55.276 19.574 Tm
(Fdo:)Tj
60.196 79.229 Td
(,)Tj
5 0 0 5 94.96 638.913 Tm
(\(Apellidos, nombre y cargo en la empresa beneficiaria\))Tj
8 0 0 8 54.567 624.708 Tm
(Actuando en nombre y representaci\363n de la empresa titular del expedie\
nte arriba citado,)Tj
/TT1 1 Tf
0.001 -2.505 Td
(EXPONE:)Tj
/TT2 1 Tf
0 -1.836 TD
(Que en el periodo comprendido entre el)Tj
0 -2.231 TD
(por un importe de)Tj
0.001 -2.045 Td
(financiaci\363n subsidiada de producciones audiovisuales e inversiones e\
n bienes de equipo, a realizar por las pymes del sector audiovisual gall\
ego,)Tj
0 -1.2 TD
(instrumentadas mediante convenio de colaboraci\363n entre el Igape, las \
sociedades de garant\355a rec\355proca y las entidades financieras adher\
idas.)Tj
/TT1 1 Tf
0 -2.609 TD
(DECLARA BAJO SU RESPONSABILIDAD:)Tj
ET
1 1 0.859 rg
187.739 597.48 m
187.739 583.307 l
268.495 583.307 l
268.495 597.48 l
187.739 597.48 l
h
f
0 i 
187.739 583.307 80.756 14.173 re
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 274.397 589.983 Tm
(y el)Tj
ET
1 1 0.859 rg
289.002 597.48 m
289.002 583.307 l
369.758 583.307 l
369.758 597.48 l
289.002 597.48 l
h
f
0 i 
289.002 583.307 80.756 14.173 re
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 375.66 589.983 Tm
(se dispuso y justific\363 correctamente la operaci\363n)Tj
ET
1 1 0.859 rg
114.803 579.631 m
114.803 565.458 l
207.637 565.458 l
207.637 579.631 l
114.803 579.631 l
h
f
0 i 
114.553 579.631 m
207.887 579.631 l
S
114.553 565.458 m
207.887 565.458 l
S
207.637 579.881 m
207.637 565.208 l
S
114.803 579.881 m
114.803 565.208 l
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 54.584 508.293 Tm
(Que, para este mismo proyecto, esta entidad solicit\363 y/u obtuvo las a\
yudas que se relacionan a continuaci\363n:)Tj
ET
0 i 0.935 w 
54.567 346.609 484.724 155.264 re
S
293.386 501.936 m
293.386 346.471 l
S
466.659 501.936 m
466.659 346.471 l
S
120.473 501.936 m
120.473 346.471 l
S
318.189 501.936 m
318.189 346.471 l
S
2 J 
539.292 490.353 m
54.567 490.353 l
S
539.292 418.913 m
54.567 418.913 l
S
1 i 
BT
/TT3 1 Tf
7 0 0 7 186.963 494.656 Tm
(ORGANISMO)Tj
15.718 -0.076 Td
(A\321O)Tj
26.055 0.04 Td
(IMPORTE \240 \200)Tj
/TT1 1 Tf
-60.08 -5.993 Td
(CONCEDIDAS)Tj
/TT3 1 Tf
40.414 5.927 Td
(DISPOSICI\323N REGULADORA)Tj
ET
1 1 0.859 rg
126.142 487.653 m
126.142 473.48 l
288.425 473.48 l
288.425 487.653 l
126.142 487.653 l
h
f
0 i 0.5 w 0 J 
126.142 473.48 162.283 14.173 re
S
1 i 
321.732 487.653 m
321.732 473.48 l
460.63 473.48 l
460.63 487.653 l
321.732 487.653 l
h
f
0 i 
321.732 473.48 138.898 14.173 re
S
1 i 
298.337 487.653 m
298.337 473.48 l
312.879 473.48 l
312.879 487.653 l
298.337 487.653 l
h
f
0 i 
298.337 473.48 14.542 14.173 re
S
1 i 
472.677 487.653 m
472.677 473.48 l
532.913 473.48 l
532.913 487.653 l
472.677 487.653 l
h
f
0 i 
472.427 487.653 m
533.163 487.653 l
S
472.427 473.48 m
533.163 473.48 l
S
532.913 487.903 m
532.913 473.23 l
S
472.677 487.903 m
472.677 473.23 l
S
0 0 0 rg
1 i 
BT
/TT1 1 Tf
7 0 0 7 58.819 381.586 Tm
(SOLICITADAS)Tj
ET
1 1 0.859 rg
126.142 470.645 m
126.142 456.472 l
288.425 456.472 l
288.425 470.645 l
126.142 470.645 l
h
f
0 i 
126.142 456.472 162.283 14.173 re
S
1 i 
321.732 470.645 m
321.732 456.472 l
460.63 456.472 l
460.63 470.645 l
321.732 470.645 l
h
f
0 i 
321.732 456.472 138.898 14.173 re
S
1 i 
298.337 470.645 m
298.337 456.472 l
312.879 456.472 l
312.879 470.645 l
298.337 470.645 l
h
f
0 i 
298.337 456.472 14.542 14.173 re
S
1 i 
472.677 470.645 m
472.677 456.472 l
532.913 456.472 l
532.913 470.645 l
472.677 470.645 l
h
f
0 i 
472.427 470.645 m
533.163 470.645 l
S
472.427 456.472 m
533.163 456.472 l
S
532.913 470.895 m
532.913 456.222 l
S
472.677 470.895 m
472.677 456.222 l
S
1 i 
126.142 453.637 m
126.142 439.464 l
288.425 439.464 l
288.425 453.637 l
126.142 453.637 l
h
f
0 i 
126.142 439.464 162.283 14.173 re
S
1 i 
321.732 453.637 m
321.732 439.464 l
460.63 439.464 l
460.63 453.637 l
321.732 453.637 l
h
f
0 i 
321.732 439.464 138.898 14.173 re
S
1 i 
298.337 453.637 m
298.337 439.464 l
312.879 439.464 l
312.879 453.637 l
298.337 453.637 l
h
f
0 i 
298.337 439.464 14.542 14.173 re
S
1 i 
472.677 453.637 m
472.677 439.464 l
532.913 439.464 l
532.913 453.637 l
472.677 453.637 l
h
f
0 i 
472.427 453.637 m
533.163 453.637 l
S
472.427 439.464 m
533.163 439.464 l
S
532.913 453.887 m
532.913 439.214 l
S
472.677 453.887 m
472.677 439.214 l
S
1 i 
126.142 415.34 m
126.142 401.167 l
288.425 401.167 l
288.425 415.34 l
126.142 415.34 l
h
f
0 i 
126.142 401.167 162.283 14.173 re
S
1 i 
321.732 415.34 m
321.732 401.167 l
460.63 401.167 l
460.63 415.34 l
321.732 415.34 l
h
f
0 i 
321.732 401.167 138.898 14.173 re
S
1 i 
298.337 415.34 m
298.337 401.167 l
312.879 401.167 l
312.879 415.34 l
298.337 415.34 l
h
f
0 i 
298.337 401.167 14.542 14.173 re
S
1 i 
472.677 415.34 m
472.677 401.167 l
532.913 401.167 l
532.913 415.34 l
472.677 415.34 l
h
f
0 i 
472.427 415.34 m
533.163 415.34 l
S
472.427 401.167 m
533.163 401.167 l
S
532.913 415.59 m
532.913 400.917 l
S
472.677 415.59 m
472.677 400.917 l
S
1 i 
126.142 398.331 m
126.142 384.158 l
288.425 384.158 l
288.425 398.331 l
126.142 398.331 l
h
f
0 i 
126.142 384.158 162.283 14.173 re
S
1 i 
321.732 398.331 m
321.732 384.158 l
460.63 384.158 l
460.63 398.331 l
321.732 398.331 l
h
f
0 i 
321.732 384.158 138.898 14.173 re
S
1 i 
298.337 398.331 m
298.337 384.158 l
312.879 384.158 l
312.879 398.331 l
298.337 398.331 l
h
f
0 i 
298.337 384.158 14.542 14.173 re
S
1 i 
472.677 398.331 m
472.677 384.158 l
532.913 384.158 l
532.913 398.331 l
472.677 398.331 l
h
f
0 i 
472.427 398.331 m
533.163 398.331 l
S
472.427 384.158 m
533.163 384.158 l
S
532.913 398.581 m
532.913 383.908 l
S
472.677 398.581 m
472.677 383.908 l
S
1 i 
126.142 381.324 m
126.142 367.151 l
288.425 367.151 l
288.425 381.324 l
126.142 381.324 l
h
f
0 i 
126.142 367.151 162.283 14.173 re
S
1 i 
321.732 381.324 m
321.732 367.151 l
460.63 367.151 l
460.63 381.324 l
321.732 381.324 l
h
f
0 i 
321.732 367.151 138.898 14.173 re
S
1 i 
298.337 381.324 m
298.337 367.151 l
312.879 367.151 l
312.879 381.324 l
298.337 381.324 l
h
f
0 i 
298.337 367.151 14.542 14.173 re
S
1 i 
472.677 381.324 m
472.677 367.151 l
532.913 367.151 l
532.913 381.324 l
472.677 381.324 l
h
f
0 i 
472.427 381.324 m
533.163 381.324 l
S
472.427 367.151 m
533.163 367.151 l
S
532.913 381.574 m
532.913 366.901 l
S
472.677 381.574 m
472.677 366.901 l
S
0 0 0 rg
1 i 
BT
/TT3 1 Tf
7 0 0 7 69.449 494.812 Tm
(AYUDAS)Tj
ET
1 1 0.859 rg
126.142 436.629 m
126.142 422.456 l
288.425 422.456 l
288.425 436.629 l
126.142 436.629 l
h
f
0 i 
126.142 422.456 162.283 14.173 re
S
1 i 
321.732 436.629 m
321.732 422.456 l
460.63 422.456 l
460.63 436.629 l
321.732 436.629 l
h
f
0 i 
321.732 422.456 138.898 14.173 re
S
1 i 
298.337 436.629 m
298.337 422.456 l
312.879 422.456 l
312.879 436.629 l
298.337 436.629 l
h
f
0 i 
298.337 422.456 14.542 14.173 re
S
1 i 
472.677 436.629 m
472.677 422.456 l
532.913 422.456 l
532.913 436.629 l
472.677 436.629 l
h
f
0 i 
472.427 436.629 m
533.163 436.629 l
S
472.427 422.456 m
533.163 422.456 l
S
532.913 436.879 m
532.913 422.206 l
S
472.677 436.879 m
472.677 422.206 l
S
1 i 
126.142 364.316 m
126.142 350.143 l
288.425 350.143 l
288.425 364.316 l
126.142 364.316 l
h
f
0 i 
126.142 350.143 162.283 14.173 re
S
1 i 
321.732 364.316 m
321.732 350.143 l
460.63 350.143 l
460.63 364.316 l
321.732 364.316 l
h
f
0 i 
321.732 350.143 138.898 14.173 re
S
1 i 
298.337 364.316 m
298.337 350.143 l
312.879 350.143 l
312.879 364.316 l
298.337 364.316 l
h
f
0 i 
298.337 350.143 14.542 14.173 re
S
1 i 
472.677 364.316 m
472.677 350.143 l
532.913 350.143 l
532.913 364.316 l
472.677 364.316 l
h
f
0 i 
472.427 364.316 m
533.163 364.316 l
S
472.427 350.143 m
533.163 350.143 l
S
532.913 364.566 m
532.913 349.893 l
S
472.677 364.566 m
472.677 349.893 l
S
0 0 0 rg
1 i 
BT
/TT1 1 Tf
7 0 0 7 58.819 276.422 Tm
(AYUDAS EN)Tj
0 -1.2 TD
(M\315NIMIS)Tj
T*
(de los 3 ejercicios)Tj
T*
(anteriores)Tj
ET
1 1 0.859 rg
126.142 302.511 m
126.142 288.338 l
288.425 288.338 l
288.425 302.511 l
126.142 302.511 l
h
f
0 i 
126.142 288.338 162.283 14.173 re
S
1 i 
321.732 302.511 m
321.732 288.338 l
460.63 288.338 l
460.63 302.511 l
321.732 302.511 l
h
f
0 i 
321.732 288.338 138.898 14.173 re
S
1 i 
298.337 302.511 m
298.337 288.338 l
312.879 288.338 l
312.879 302.511 l
298.337 302.511 l
h
f
0 i 
298.337 288.338 14.542 14.173 re
S
1 i 
472.677 302.511 m
472.677 288.338 l
532.913 288.338 l
532.913 302.511 l
472.677 302.511 l
h
f
0 i 
472.427 302.511 m
533.163 302.511 l
S
472.427 288.338 m
533.163 288.338 l
S
532.913 302.761 m
532.913 288.088 l
S
472.677 302.761 m
472.677 288.088 l
S
1 i 
126.142 285.502 m
126.142 271.329 l
288.425 271.329 l
288.425 285.502 l
126.142 285.502 l
h
f
0 i 
126.142 271.329 162.283 14.173 re
S
1 i 
321.732 285.502 m
321.732 271.329 l
460.63 271.329 l
460.63 285.502 l
321.732 285.502 l
h
f
0 i 
321.732 271.329 138.898 14.173 re
S
1 i 
298.337 285.502 m
298.337 271.329 l
312.879 271.329 l
312.879 285.502 l
298.337 285.502 l
h
f
0 i 
298.337 271.329 14.542 14.173 re
S
1 i 
472.677 285.502 m
472.677 271.329 l
532.913 271.329 l
532.913 285.502 l
472.677 285.502 l
h
f
0 i 
472.427 285.502 m
533.163 285.502 l
S
472.427 271.329 m
533.163 271.329 l
S
532.913 285.752 m
532.913 271.079 l
S
472.677 285.752 m
472.677 271.079 l
S
1 i 
126.142 268.494 m
126.142 254.321 l
288.425 254.321 l
288.425 268.494 l
126.142 268.494 l
h
f
0 i 
126.142 254.321 162.283 14.173 re
S
1 i 
321.732 268.494 m
321.732 254.321 l
460.63 254.321 l
460.63 268.494 l
321.732 268.494 l
h
f
0 i 
321.732 254.321 138.898 14.173 re
S
1 i 
298.337 268.494 m
298.337 254.321 l
312.879 254.321 l
312.879 268.494 l
298.337 268.494 l
h
f
0 i 
298.337 254.321 14.542 14.173 re
S
1 i 
472.677 268.494 m
472.677 254.321 l
532.913 254.321 l
532.913 268.494 l
472.677 268.494 l
h
f
0 i 
472.427 268.494 m
533.163 268.494 l
S
472.427 254.321 m
533.163 254.321 l
S
532.913 268.744 m
532.913 254.072 l
S
472.677 268.744 m
472.677 254.072 l
S
1 i 
126.142 251.487 m
126.142 237.314 l
288.425 237.314 l
288.425 251.487 l
126.142 251.487 l
h
f
0 i 
126.142 237.314 162.283 14.173 re
S
1 i 
321.732 251.487 m
321.732 237.314 l
460.63 237.314 l
460.63 251.487 l
321.732 251.487 l
h
f
0 i 
321.732 237.314 138.898 14.173 re
S
1 i 
298.337 251.487 m
298.337 237.314 l
312.879 237.314 l
312.879 251.487 l
298.337 251.487 l
h
f
0 i 
298.337 237.314 14.542 14.173 re
S
1 i 
472.677 251.487 m
472.677 237.314 l
532.913 237.314 l
532.913 251.487 l
472.677 251.487 l
h
f
0 i 
472.427 251.487 m
533.163 251.487 l
S
472.427 237.314 m
533.163 237.314 l
S
532.913 251.737 m
532.913 237.064 l
S
472.677 251.737 m
472.677 237.064 l
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 397.17 149.711 Tm
(a trav\351s de la entidad financiera prestamista)Tj
ET
1 1 0.859 rg
146.693 155.984 m
146.693 141.811 l
392.598 141.811 l
392.598 155.984 l
146.693 155.984 l
h
f
0 i 
146.693 141.811 245.905 14.173 re
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 54.584 149.711 Tm
(Que se liquide a la empresa)Tj
/TT1 1 Tf
0 1.86 TD
(SOLICITA:)Tj
/TT2 1 Tf
0 5.846 TD
(Asimismo, la empresa se compromete a comunicar inmediatamente cuantas ay\
udas solicite u obtenga para la misma actuaci\363n de otras)Tj
0 -1.2 TD
(administraciones p\372blicas o de otros entes p\372blicos o privados, na\
cionales o internacionales, a partir de la fecha de la presente declarac\
i\363n.)Tj
0 -2.343 TD
(Y, por todo ello,)Tj
0 -6.378 TD
(la subsidiaci\363n correspondiente, de acuerdo con lo establecido en el \
art\355culo 7 de las citadas bases y les sean abonados a la entidad fina\
nciera y)Tj
0 -1.2 TD
(sociedad de garant\355a rec\355proca los importes devengados seg\372n el\
 citado art\355culo.)Tj
ET
1 1 1 rg
54.567 111.338 m
54.567 94.33 l
160.226 94.33 l
160.226 111.338 l
54.567 111.338 l
h
f
0 i 
54.317 94.33 m
160.476 94.33 l
S
1 i 
160.866 111.338 m
160.866 94.33 l
187.795 94.33 l
187.795 111.338 l
160.866 111.338 l
h
f
0 i 
160.616 94.33 m
188.045 94.33 l
S
0 0 0 rg
1 i 
BT
/TT2 1 Tf
8 0 0 8 160.866 100.361 Tm
(,)Tj
ET
1 1 1 rg
188.504 111.338 m
188.504 94.33 l
…