HSBC-Payment_Advice_pdf[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HSBC-Payment_Advice_pdf.scr.exe
Size

2.1MB
MD5

b3469fface251fb3d6a9e2da0d236802
SHA1

9c804dc2a5b381ab9ccc69073434fbcd03e6398e
SHA256

f797a34828089feb29e7f77d31f184b335d7958755d385fad50d69fdbd3660d2
SHA512

431250e398eafcf193245d37f5eaf87ebb37e3cda0f5915e77f504e65e46606d95212ad7fb934a28e98b27a7de333aaf438c8d38849f343592050f3fabe3d463
SSDEEP

24576:a+WDYaOZ49Ot09OX7l348A5NyVeGZEeN36QMr/+QyiAv1L+khttmq6NjszOVbz5i:uYf6s6ihs3sC7bk0u

Score

1^/10

Malware Config

Signatures

Files

HSBC-Payment_Advice_pdf.scr.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ