81eeabd06e23f1d8e49173692692fcd4_hacktools_xiaoba_JC[.]exe | Triage

Sharing

General

Target

81eeabd06e23f1d8e49173692692fcd4_hacktools_xiaoba_JC.exe
Size

3.6MB
MD5

81eeabd06e23f1d8e49173692692fcd4
SHA1

b6c0692f8219fb0f5687bb65649f95d16b27bdf4
SHA256

72726d2e10f572b53eb5984a5bd8cf0eebe99166dd0b759346c5a823fdc5d995
SHA512

9c86bd459e66ff2606b135d97c8e5d5c0e2848f42bb45acb71e3af03f4ef06f48254bf4347e8d998bc800f92a05fa79673f9d6c9bcbb09f3f23b60345884699c
SSDEEP

49152:RzG1BqCBGJdodXAGRe5CFHIovgmAZf1N:SBIKRAGRe5KtMZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81eeabd06e23f1d8e49173692692fcd4_hacktools_xiaoba_JC.exe

Files

81eeabd06e23f1d8e49173692692fcd4_hacktools_xiaoba_JC.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ