2024-09-04_58b75aac290490e881ec3a831f0c5491_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-04_58b75aac290490e881ec3a831f0c5491_hacktools_xiaoba
Size

3.2MB
MD5

58b75aac290490e881ec3a831f0c5491
SHA1

1ce68f8a34d42b08dae164090edcc620f0700774
SHA256

ca9ea31425f594bb5f26a73bf05a92a6664076fea53a2216f15c6320eca22759
SHA512

d2d94aed812dc4584bdc54d80b0197ea1433041a68e1391a60811eb5f2dbb4ff6fcd6cc2699de2d26dffc606626fa24c460f1f372b77efbe7411a427c4c8299d
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NB:DBIKRAGRe5K2UZl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-04_58b75aac290490e881ec3a831f0c5491_hacktools_xiaoba

Files

2024-09-04_58b75aac290490e881ec3a831f0c5491_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ