2024-06-20_0937eb7bfbf7bbd9d1266cba27e0035f_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-20_0937eb7bfbf7bbd9d1266cba27e0035f_hacktools_xiaoba
Size

3.2MB
MD5

0937eb7bfbf7bbd9d1266cba27e0035f
SHA1

0148ea7242fdcdff7a6f90ab260ef3f05886d2d7
SHA256

ea4e0540392ad9c85819f3f771bfbf961442045a33ac615e5e9fe1f64ed92f95
SHA512

a3bdf693e3407aabd29bd4ecc28128d82bbf02c7d25e8740141761da421ed8a4015b167ae93f40ffd75a0b203a991c9b008c7a98fb677714f89c6bbf85201d02
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NY:DBIKRAGRe5K2UZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-20_0937eb7bfbf7bbd9d1266cba27e0035f_hacktools_xiaoba

Files

2024-06-20_0937eb7bfbf7bbd9d1266cba27e0035f_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ