2024-08-20_295338c52a4050b0f57b0f9a922f9dda_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_295338c52a4050b0f57b0f9a922f9dda_hacktools_xiaoba
Size

3.2MB
MD5

295338c52a4050b0f57b0f9a922f9dda
SHA1

c6832ecbb845e1d6285cf7afdd246f68a060b1b8
SHA256

64c828a83ef6894f99b124874cf9ebb71acceea83c5995435e2b87b07e9652f5
SHA512

5fb446de4be6d7a0707c49c20ca1abb26808f45ee597432de41eb0fe1b3601bb34653f7b7786fa092096916e67b166063644d1f54aa9b64c0991581bb07c5965
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NP:DBIKRAGRe5K2UZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_295338c52a4050b0f57b0f9a922f9dda_hacktools_xiaoba

Files

2024-08-20_295338c52a4050b0f57b0f9a922f9dda_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ