6bb6956ae5c1dce1f1e4ef30e2994672d6cb7072396451273bf69ba62a4a4ea8
- SHA256 6bb6956ae5c1dce1f1e4ef30e2994672d6cb7072396451273bf69ba62a4a4ea8
Static task
static1
Behavioral task
behavioral1
Sample
HSBC Payment Advice.img.exe
Resource
win7-20240611-en
windows7-x64
12 signatures
150 seconds
General
- Target 6bb6956ae5c1dce1f1e4ef30e2994672d6cb7072396451273bf69ba62a4a4ea8
- Size 659KB
- Sample240613-dcffvsvhmp
- SHA256 6bb6956ae5c1dce1f1e4ef30e2994672d6cb7072396451273bf69ba62a4a4ea8
- MD5 5e47accd9c91048c5ec104ebcbe38e1d
- SHA1 bb80822aa40666abb7c47f7c374a160a985f47c2
- SHA512 d96064da3a805ef86af256ac029cbbcf74fceaa599c00dda84ef6b8eeffaf62e9a3999c76c95762fe32cc704ddf552ea6131ad8a36c0643e56d2a75dd9bae183
- SSDEEP 12288:Ray8l38/qt5233sJ854A9lbugUHsuclOdaRsvFyt11rbM2iJe3VvN1qq1ru6GxIF:NoB5C3+zQlbulHs9lUaAgtrJiJel11qm
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
6bb6956ae5c1dce1f1e4ef30e2994672d6cb7072396451273bf69ba62a4a4ea8.zip 659KB
-
HSBC Payment Advice.img.exe.exe 749KB
HSBC Payment Advice.img.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 63eac58257e89ae7383cdfcddbf1209d18d9eda53fefe0b5a57de854649499d9
- MD5 29f5ece6140932732a934fb693b77e84
- SHA1 c7420e2c1365e60ab4dff96be2a4619dd5b71da3
- SHA512 e6d119aa2f3b33beaedaa767074f0f5b7b0200907ddb6fab8a7e292edf55f4187642a468ec4f8750991c38dcd554f2b1aa08185c7f1418db57f895e8b0bb92a7
- SSDEEP 12288:1edXtfETVJW54ALLNguUDAsUlQ5KRYvF6t11D1J2inUtGN1qaJru6f5WgR3OrZkR:cd92HZYLNgfDAZl4KAUtrminUg1qYrug
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
eb:01:a9:d7:33:b8:0a:46:fd:e0:fc:53:2e:c2:36:2d:ba:2a:33:cf:f5:f9:d7:39:8d:40:67:11:c3:d9:4e:40
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Chains
Mar 16, 2019
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
PE Signature issue
Digest
27:7c:c2:21:ca:aa:01:e5:9a:eb:cd:97:39:86:aa:43:22:9f:bc:4f
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Chains
Mar 16, 2019
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Serial Number
7c:11:18:cb:ba:dc:95:da:37:52:c4:6e:47:a2:74:38
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 13, 2018 - Nov 8, 2021
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Serial Number
7c:11:18:cb:ba:dc:95:da:37:52:c4:6e:47:a2:74:38
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 13, 2018 - Nov 8, 2021
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
0
Major OS version
4
Entry point
752986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
727KB
Virtual Size
727KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ