HSBC TT Copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HSBC TT Copy.exe
Size

644KB
MD5

32edf854e42b5323434fce6a04546ab9
SHA1

5eb698ef55d21adeb80317b97ce37ebfc07dc1e8
SHA256

6f438e6e004889f2f85032d8d44202f2854ee8cbb884ba1005d1fdaa5b7d8f7e
SHA512

764ba109ab14249e4be56352106b12f456f66b9a559291694c28b11229d2121d3cf2ff30f78ce634495f093ec2a2aa5824de161f33de74e52e58c190ba86105e
SSDEEP

12288:uTKx0YPX/NqPsA1OSpfxOJTxC2iiSZ4NT3BolldTJ54:uTpHPsYsTxC2tqsoDN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HSBC TT Copy.exe

Files

HSBC TT Copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ