2024-09-06_f6fc66057bd76cfcf4ed4fd685999d1b_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_f6fc66057bd76cfcf4ed4fd685999d1b_hacktools_xiaoba
Size

3.2MB
MD5

f6fc66057bd76cfcf4ed4fd685999d1b
SHA1

b49042de1f0214f1689ba2c2ca1eeb3a82dd3ea8
SHA256

2ceff10521ffad68b6f6160952c1f7f041762d38fc66a400bb73c981a381261f
SHA512

bd13fb631066e47947f178361594288b9238f8db4a548deca9387276c6262f5bbfdd998278a105c9d435dab910f622dc4627b6b3b1b3728a510fa08c4f168484
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1No:DBIKRAGRe5K2UZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_f6fc66057bd76cfcf4ed4fd685999d1b_hacktools_xiaoba

Files

2024-09-06_f6fc66057bd76cfcf4ed4fd685999d1b_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ