24092024_1433_22092024_hsbc swift[.]zip | Triage

Sharing

General

Target

24092024_1433_22092024_hsbc swift.zip
Size

396KB
MD5

e83a52dcca22e4c7951dab3b269a9491
SHA1

4b802049e8b3fee25775150025d6201f62be53f3
SHA256

f52a62353fd788c56c43230228cbfcc24a0b2cd3cf520ffd9a6f0735ee068096
SHA512

0643a1fe27d246a823afed48e3a070629b1c6d020b9ebeefa390fd39c90bc0a7ed57e328fec364428ccbed6f05c4913ccbd7605b7f45c2a408847f8f65b5cd80
SSDEEP

12288:2zH41HF7J7obQ3V/Xs7VeXV9qbx9NCPaC2EXRD8XsgxR:2zY11EQFPsBYqtLCPZQXJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/hsbc swift.exe

Files

24092024_1433_22092024_hsbc swift.zip
.zip

Password: infected
hsbc swift.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ