2024-08-18_e922420893f413fa2961a03dd167c6b5_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-18_e922420893f413fa2961a03dd167c6b5_hacktools_xiaoba
Size

3.2MB
MD5

e922420893f413fa2961a03dd167c6b5
SHA1

6bcaf1d666c8947930718a44c4c3c308aa883c01
SHA256

88bf7bc4298df55f803aa3a1de6a2fe270879f0429cd1e5adb601e64b750b8e4
SHA512

bdf39117f0c4654485f984027e5ce7cd9830437d5a7d9070c2ef123b4cf6576ef9de7fe0462b81ef6ef1801803c6c3d8034f81c048f091e0e73107168103461f
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NS:DBIKRAGRe5K2UZu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-18_e922420893f413fa2961a03dd167c6b5_hacktools_xiaoba

Files

2024-08-18_e922420893f413fa2961a03dd167c6b5_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ