2024-01-26_e43e14c75c3d0854334fe03687c88454_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-26_e43e14c75c3d0854334fe03687c88454_hacktools_xiaoba
Size

3.6MB
MD5

e43e14c75c3d0854334fe03687c88454
SHA1

2eb7ca49659209bcc88c7b9c963779c8c0964266
SHA256

c3fa97926bc9fc566a15ec9588661ce92db5891189ee0487d350bbb297605208
SHA512

8e574fd612c88d5112b416f6526cfcf4f0377822a2b593c3468528698e737d908f9870bab011b33a4ff6c808acccec721c35d10add2784105760ca8b755a9458
SSDEEP

49152:RzG1BqCBGJdodXAGRe5CFHwovCmAZf1N:SBIKRAGRe5K1SZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-26_e43e14c75c3d0854334fe03687c88454_hacktools_xiaoba

Files

2024-01-26_e43e14c75c3d0854334fe03687c88454_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ