HSBC_PAYMENT[.]exe | Triage

Resubmissions

05/06/2023, 12:33

230605-prh13sgf25 7

05/06/2023, 12:12

230605-pc8yysge46 7

Sharing

General

Target

HSBC_PAYMENT.exe
Size

644.0MB
MD5

727cf14d437a1c4bd02ef7024ebc8034
SHA1

b65950a0a5af8e68fea350c40431e237c463ceb4
SHA256

c4058e7e7ad531fd538bfefa4ca037c95b6c8361d8a6199ad564f72b436fb404
SHA512

ad279283fbd430404f74c3ccedb0c867543f786286a6d9e8369735cbf0c9e3d7099b753e8dd9245d512fb66b33cd1e9f7db3e2c910816f2f37f78c8bb58d3b7a
SSDEEP

192:n8xof70lMktQhTRvzzzz+rxLZHC62TNsFxL8LF7B1gZh:nWofwMktQJRGrxLZHCXTNsFxL8LF4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HSBC_PAYMENT.exe

Files

HSBC_PAYMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ