2024-08-13_45291ac82b29caf31cc64ca4e31ea261_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-13_45291ac82b29caf31cc64ca4e31ea261_hacktools_xiaoba
Size

3.2MB
MD5

45291ac82b29caf31cc64ca4e31ea261
SHA1

f3d720f38d0f0ac21f0894f2609f04aae0c4fadf
SHA256

40dd688243058fa88d030631b978718e263f177d966490dfa33a74d3295cd0da
SHA512

80ff25a10cb0371485db84e1f2fcc200a8c01e3bc6664b2f325103b7882a9df182cc84ddc343beb6fb88f1061df33a240a40fb8c505b3aac0d474ead2eb4d8cd
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1N3:DBIKRAGRe5K2UZr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-13_45291ac82b29caf31cc64ca4e31ea261_hacktools_xiaoba

Files

2024-08-13_45291ac82b29caf31cc64ca4e31ea261_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ