2024-07-07_1c0d63347719ad58a5fc0703fda76529_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-07_1c0d63347719ad58a5fc0703fda76529_hacktools_xiaoba
Size

3.2MB
MD5

1c0d63347719ad58a5fc0703fda76529
SHA1

de61413eaad8c58426f40dc45bcdbf0bf476c6b5
SHA256

c700250779aa819c7f06ee5a5a5219f8db2a3ff46a94ffa7a7798376de8b61c8
SHA512

9f3d8f9aab7c290ed942d03ad339566b2e18e23e3958e72b8cb3c5c6003858bfdc57de01d17c7ffb3cb01fc5b7adc005dc4ec77d2d32240c0de5d2a1c3654813
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1N/:DBIKRAGRe5K2UZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-07_1c0d63347719ad58a5fc0703fda76529_hacktools_xiaoba

Files

2024-07-07_1c0d63347719ad58a5fc0703fda76529_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ