Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_6ca1c32e70aa76136824930fc8bd9a71_xiaoba.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-11_6ca1c32e70aa76136824930fc8bd9a71_xiaoba.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-06-11_6ca1c32e70aa76136824930fc8bd9a71_xiaoba
-
Size
732KB
-
MD5
6ca1c32e70aa76136824930fc8bd9a71
-
SHA1
230190490b064f6a4042b44354f1c8308d1dca52
-
SHA256
5b33a84fbb56cc7c5c0acaf54004817151764055395b478c9ab729f2653c58d6
-
SHA512
e94adc4786c4fa2b31d39eeedfcd4d3c4a99929cf17fcff1a49df7c0ea9b08f683e6cb30650a88aa8462d73cc434667e0312811487471b0f7235db4f666a9fc4
-
SSDEEP
12288:wZKxL5bIhmAsra/AXjee13equY5tO8psNy0a/k8a34vJsOldIz8dHCdbcO5eI3AW:woxLrAsraoXjee0qH5U8iy0a/k8a34vm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-11_6ca1c32e70aa76136824930fc8bd9a71_xiaoba
Files
-
2024-06-11_6ca1c32e70aa76136824930fc8bd9a71_xiaoba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 524KB - Virtual size: 521KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ