2024-05-20_08b0e5d1510f2326653b169384f01d92_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-20_08b0e5d1510f2326653b169384f01d92_hacktools_xiaoba
Size

3.2MB
MD5

08b0e5d1510f2326653b169384f01d92
SHA1

7086b6d8facb7d8dceedd689a9f47d80da44b123
SHA256

f26a1bfa89eb493d05becc5179fd30cb7977c0e008d3a16a7fe54d072be26357
SHA512

2f02b411dd32d7bfc3feb190a09886fa7b8d3fdd36c2b28ea9f3dc112e3920e25f7657856f0c1a40d56f771f02dc11bcb43092a561f8fc6cac1c8ee0f1b118ab
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NA:DBIKRAGRe5K2UZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-20_08b0e5d1510f2326653b169384f01d92_hacktools_xiaoba

Files

2024-05-20_08b0e5d1510f2326653b169384f01d92_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ