2024-06-09_5d21ca380dc1f97abba54ce887bf9a10_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-09_5d21ca380dc1f97abba54ce887bf9a10_hacktools_xiaoba
Size

3.2MB
MD5

5d21ca380dc1f97abba54ce887bf9a10
SHA1

223c2c9a2a4ba6f63047a98f2a32a506793b78ac
SHA256

30efecf34baba42828bc177376adae60053b1528d0084b9b546e0ca7b6754087
SHA512

0c3c427c32947f673a172f7afece46105ba87dd07ffa409e33249e4fd7c2987ddd81f649c0231bb48c6d0bbe577525c1dcbc0b8a4115d52495217802e934d490
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Nd:DBIKRAGRe5K2UZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-09_5d21ca380dc1f97abba54ce887bf9a10_hacktools_xiaoba

Files

2024-06-09_5d21ca380dc1f97abba54ce887bf9a10_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ