2024-06-07_1bd9da6d3dcd4dfae407ecc182cbeb97_hacktools_xiaoba | Triage

Sharing

General

Target

2024-06-07_1bd9da6d3dcd4dfae407ecc182cbeb97_hacktools_xiaoba
Size

3.2MB
MD5

1bd9da6d3dcd4dfae407ecc182cbeb97
SHA1

8ed0edd41f1ddb47bdeab98be5f30c4127d909f9
SHA256

dc1a9a8c40f423e074c5e70227dd7128956f60f191a979a3cfb13721a4d86f8e
SHA512

c986ca33a6f4b2dd6e27d10cc2f17ab05e07a5ccf07f0bc63ea52c7df8e36185873b5e9da48938985c3138aea28ba9e3a98b0b8f5a6da21eaa28033ef64a24fd
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Nu:DBIKRAGRe5K2UZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-07_1bd9da6d3dcd4dfae407ecc182cbeb97_hacktools_xiaoba

Files

2024-06-07_1bd9da6d3dcd4dfae407ecc182cbeb97_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ