HSBC Payment Advice_pdf[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HSBC Payment Advice_pdf.gz
Size

629KB
MD5

32574ddd8e15878cffac0cce7754d9e3
SHA1

1c4587ffe6d81c2d61c4a06c6d77c22ff211aeb6
SHA256

f8843027fb160fc3fcdc633e81c03d1e9092f2e2239a7b6b88ca12474e8eead4
SHA512

7e7aa46251ba0545941cbb9d438b63f60c243104f24382450f7ef8134193c11de47752a27c19c5cf9b118d9b01b28833323c5e2897cec77be8e9fc89c9b465d9
SSDEEP

12288:FYDdQPDRPYC/ff5lfPexb50J8icuQhhqZnmfKuSvzTknV:quDHDPeb0qicuOmmgUnV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HSBC Payment Advice_pdf.exe

Files

HSBC Payment Advice_pdf.gz
.rar
HSBC Payment Advice_pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ