HSBC Payment Advice _pdf[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HSBC Payment Advice _pdf.gz
Size

725KB
MD5

6ee8c7de4d12daaa9a1143ec55e6e531
SHA1

89d4125bd8b4dd747efaf4b2b072963f79fe18c0
SHA256

405663c97f0b9920937968fbea651b5bd4c6e58c4823537f8ff3acd5000a3d1a
SHA512

86b6ebd6d9528fb9b1b8904db26f49360e26a5c74e76594fd91f82445c689d1672de086c9343ae0ba98cf9695a21e24c2c45b00341d1d6581f4e60b3e53ac381
SSDEEP

12288:Pbb1IsbxgY41nBQqVuSPtOsQNYoITpAvtC3B2/GNywmIf3KH1pnLCUG5B:PfbxgY41duSFOQ78I3CwVfaHnL1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HSBC Payment Advice _pdf.exe

Files

HSBC Payment Advice _pdf.gz
.rar
HSBC Payment Advice _pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 776KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ