2024-05-27_7363078ea4ea8157803e78a25f3e5678_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-27_7363078ea4ea8157803e78a25f3e5678_hacktools_xiaoba
Size

3.2MB
MD5

7363078ea4ea8157803e78a25f3e5678
SHA1

676d9b3e5cb7af635477d72c7c8b3f48dbbd30bc
SHA256

86c142c9fee8c20fe3f019c63d97450819a608a5a0c4ff86960e2d8bca8fec1f
SHA512

b8e7b96bd4c7f514515672f636d66c14aba103e21712f9eb0541662c52db38bf036240f9d6f779cc2ace08df187b943a4133dbf0fdb3a99fb282e20fb0f92464
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Nk:DBIKRAGRe5K2UZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-27_7363078ea4ea8157803e78a25f3e5678_hacktools_xiaoba

Files

2024-05-27_7363078ea4ea8157803e78a25f3e5678_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ