2024-07-26_42fc589fc0355f194659617620663b9a_hacktools_xiaoba | Triage

Sharing

General

Target

2024-07-26_42fc589fc0355f194659617620663b9a_hacktools_xiaoba
Size

3.2MB
MD5

42fc589fc0355f194659617620663b9a
SHA1

fc2292346dec08bb7786d4decdeef5fbacae9503
SHA256

fee2e18b6165cae0b9a09d92efdc510a8c335d62ae94cb1c205781dfc31b2600
SHA512

3d0b683ca8fae347bdbf44e4e036e1b1533f8e44fb2aed8ec27fab72edad72e3a98cfd213609030c69175ece8a2a2ddac88827fe38b59d83240f3b2ef997147e
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1N8:DBIKRAGRe5K2UZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-26_42fc589fc0355f194659617620663b9a_hacktools_xiaoba

Files

2024-07-26_42fc589fc0355f194659617620663b9a_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ