2024-06-01_820c9714a0334a97a06294ca0f40c363_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_820c9714a0334a97a06294ca0f40c363_hacktools_xiaoba
Size

3.2MB
MD5

820c9714a0334a97a06294ca0f40c363
SHA1

0a79df161aa707d8baac30459931e7d64323b1e4
SHA256

6d68cb70d41c203cd28ce2d22a8aefa2a3ff894fc6d76f0f44b868bdee45db7a
SHA512

5078bbb0485e13b041c4754f1a026bc100c25a4f72e514b1315f2c2cfd96543633acc414a01f1144e03e58a5c488a7ae8fe4a358c581ccaec4fef082e8910a52
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Nl:DBIKRAGRe5K2UZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_820c9714a0334a97a06294ca0f40c363_hacktools_xiaoba

Files

2024-06-01_820c9714a0334a97a06294ca0f40c363_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ