HSBC Bank_ Payment Advice_PDF[.]exe | Triage

Sharing

General

Target

HSBC Bank_ Payment Advice_PDF.exe
Size

553KB
MD5

9a46c55afbfaafeb5a710975268f68d9
SHA1

39f31f2c47e21899e7c6c915d046fe270347d8a4
SHA256

ee4f7a5d95e38e4ea5e0a7387ea99e0ef066f49261d685d5214f6e705d8a90e9
SHA512

c3d692bb8fd4e8416e2dea0cf4f4e97488987344321b9b0b4f34951490bd3394f5a2643c34f2f757b4824936f67d2af2a083433845a1f7eccd98387883e5b123
SSDEEP

12288:77u0EuGzcMz8Q+TjLGkzVaZpudWiE7++SiccCcn9+55j58BuAy6L:+0tGBoBT/FzVE0c7+ziclJAlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HSBC Bank_ Payment Advice_PDF.exe

Files

HSBC Bank_ Payment Advice_PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ