2024-04-20_d373649101b855c2065f7781d026fb4a_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_d373649101b855c2065f7781d026fb4a_hacktools_xiaoba
Size

3.2MB
MD5

d373649101b855c2065f7781d026fb4a
SHA1

e57fdc7d8a73075ca368b4455b24b8dfd5e46754
SHA256

f90113514ac190e331f97b7fe78d3837d806090ce32c9d5b30f75627498d0aa8
SHA512

584bf5f5b9cd5afd23ff87974cdaa0b688fcff38aae9032a71a39e1c1e9e1364ccd390bbee2b7ebcd7b349c60b50db1e08ce6d54b078bbbcddfdd2384c515410
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NY:DBIKRAGRe5K2UZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_d373649101b855c2065f7781d026fb4a_hacktools_xiaoba

Files

2024-04-20_d373649101b855c2065f7781d026fb4a_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ