2024-03-11_ce634b952d7705b73182209074aa54c3_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-11_ce634b952d7705b73182209074aa54c3_hacktools_xiaoba
Size

3.2MB
MD5

ce634b952d7705b73182209074aa54c3
SHA1

619240b211ddfe30558a9a25dd503d68cb1f0a5d
SHA256

6ef76ac64a7508dd63b4e2b116ac54f535332731c5b6849ac35508c340fc89d3
SHA512

371f51c7853e8ba835f1b0d678229ccc37f263b3f012e964749b19454ea653c9b560add48c3f31f30197e83dc08a3692010f13736c1d60a822ec36ce7ebfac5e
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Na:DBIKRAGRe5K2UZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-11_ce634b952d7705b73182209074aa54c3_hacktools_xiaoba

Files

2024-03-11_ce634b952d7705b73182209074aa54c3_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ