2024-05-27_cc0d8a766c240af0e7b578ec17269e63_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-27_cc0d8a766c240af0e7b578ec17269e63_hacktools_xiaoba
Size

3.2MB
MD5

cc0d8a766c240af0e7b578ec17269e63
SHA1

d6b7a6a5f3b0772aa98c11d6d4babe617fb5a28a
SHA256

6e6b07a3be6a5f0658c143f7c3511a65af3247c698cec16d6e31939438f4b708
SHA512

45cc446e6fe2a6453643ff49be516be5a4f45049dc3f10fd71ebe8059729bc4d32294e16ad97d264e779c71c0ab7b9e709957ba7c25ce9093022b6bc8daefe9b
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NW:DBIKRAGRe5K2UZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-27_cc0d8a766c240af0e7b578ec17269e63_hacktools_xiaoba

Files

2024-05-27_cc0d8a766c240af0e7b578ec17269e63_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ