2024-06-27_e16c471bb1891c495c33b67936c508cd_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-27_e16c471bb1891c495c33b67936c508cd_hacktools_xiaoba
Size

3.2MB
MD5

e16c471bb1891c495c33b67936c508cd
SHA1

903d327265a9fd3df3c84349a8018bf1c9ea117b
SHA256

45dc5dc30df52d2bf57e920459b9f4de6f284f41aad73dfd3cdbf8fbd936b06b
SHA512

048b1c328739a380b693894e8b65b1f31102b3f11e471e0356f41bc6c74c6a78860f5da8af6f29c9587fcf7bcd543270e174d9f07e0d9c11cd55c09e0f045046
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Nk:DBIKRAGRe5K2UZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-27_e16c471bb1891c495c33b67936c508cd_hacktools_xiaoba

Files

2024-06-27_e16c471bb1891c495c33b67936c508cd_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ