2024-08-29_a1c4ac68a11b352cacc5385207e51454_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-29_a1c4ac68a11b352cacc5385207e51454_hacktools_xiaoba
Size

3.2MB
MD5

a1c4ac68a11b352cacc5385207e51454
SHA1

f338bf22e7091382966d53915e86937e3ebde900
SHA256

0b111fa1f40fee3fa36ce130eb9d2d3163d33e5ad233b6aa940c4626f7161f42
SHA512

c44e3a032e531b67c9a353f424f33757667f9493c19505e3c69f0f8ed50b50f4667237f4a9441e6d7f31b2238be321ea26ac4684669cad8409672ed55aa7eb72
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1N+:DBIKRAGRe5K2UZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-29_a1c4ac68a11b352cacc5385207e51454_hacktools_xiaoba

Files

2024-08-29_a1c4ac68a11b352cacc5385207e51454_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ