HsbcpaymentSwift[.]com[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HsbcpaymentSwift.com.exe
Size

647KB
MD5

3ab91ddca77430d4f4b1a811611bc622
SHA1

064a306cc2cddf4617d8c96d641bbcc11e90b8a0
SHA256

994e690703864150e91ac5f4d3cd5264d45e2ecc182424bd5285cbf935cb855d
SHA512

0d6fc9b2b5b505e17ac4885852fc6e39cd934e838ea2302f90cc09c1f9c3189b344d30ce5d56cee5e5cdb54f5aeed8472ecc2aab3422a78df1f454270ae70830
SSDEEP

12288:wlPloOJRYWq0WVVj9T/XSsGSol24i+okhoBfw4pPcyxCig1ewhc0IPg5jYvUyJ1p:O9oOJbjWfVzoV8kho64p0tIAhAg5+UUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HsbcpaymentSwift.com.exe

Files

HsbcpaymentSwift.com.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ