HSBC Payment Advice_pdf[.]exe | Triage

Sharing

General

Target

HSBC Payment Advice_pdf.exe
Size

799KB
MD5

ad0f1127ea2e0a563c8863684b42657d
SHA1

df3e2c75d399e2c5104ba80565e7d380766d3fc2
SHA256

907939021dfc3946ca5395b6a318ac3957e069725e5689968522a58ae81d0ab4
SHA512

7abe6a3013c1a998fa75ca02cf73e71dd4c11140cc9981cf5e1145854b31f33b6fc6bd6a2b665809634b2e860c600aa40b98c6972b3a19e25ae037dcbfa1fa56
SSDEEP

12288:B0gifordrIOMq5o6IAb2FGGAu6XnwEG4ArzPd4Ly6:B0jopUOMq5jISsQ+DrLdL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HSBC Payment Advice_pdf.exe

Files

HSBC Payment Advice_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 663KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ