2023-08-22_07c28f582690bb2fbea56c3d47ec9dae_hacktools_xiaoba_JC[.]exe | Triage

Sharing

General

Target

2023-08-22_07c28f582690bb2fbea56c3d47ec9dae_hacktools_xiaoba_JC.exe
Size

3.2MB
MD5

07c28f582690bb2fbea56c3d47ec9dae
SHA1

f5a992e1cc02536c9e0e01f99944ef83120d810e
SHA256

ebbf9dd52f6a30e24ead69c19a8c44a8207e5fae0b54e3c0f6008cb1ccfe9587
SHA512

fe32cd7c43671fdb74f9287c73a81a8557bf49343586692ad0d74477fb8af27c8f9733675e93fa0f0815162607a20001d5f9ef2330c65ec7fc3db26200d0c40e
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NG:DBIKRAGRe5K2UZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_07c28f582690bb2fbea56c3d47ec9dae_hacktools_xiaoba_JC.exe

Files

2023-08-22_07c28f582690bb2fbea56c3d47ec9dae_hacktools_xiaoba_JC.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ