2024-09-01_6b02c6230f269d32f9dd31a18b5eb053_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-01_6b02c6230f269d32f9dd31a18b5eb053_hacktools_xiaoba
Size

3.2MB
MD5

6b02c6230f269d32f9dd31a18b5eb053
SHA1

6df0d747d97763320033dde6b90237d59219ebcb
SHA256

64f9674c942ef947eedfd06076763a865aadacfd203823df2dfb5ecca6e5f4b1
SHA512

bfd32d2f766879a85386354a9863d9286f1c54f4e76684a22181baf3133d90921af8f79111d1ad6b87f4f02f84c0000ca06d1d5144f12a5c42bf6c50c4bb9a69
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NT:DBIKRAGRe5K2UZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-01_6b02c6230f269d32f9dd31a18b5eb053_hacktools_xiaoba

Files

2024-09-01_6b02c6230f269d32f9dd31a18b5eb053_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ