2024-09-13_5cbc18d4d920a138f46a7f4e98186cdc_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-13_5cbc18d4d920a138f46a7f4e98186cdc_xiaoba
Size

4.7MB
MD5

5cbc18d4d920a138f46a7f4e98186cdc
SHA1

bdf52c2107ff38c6b7ad35cb91bedfd4dcbe4983
SHA256

6307f4cb05a3347bedc94bced747dc66aa46705a0347c1b3901ea584dbdd28b6
SHA512

90025427237bc2eaa278eb288241bf96e31732e3fa49bfb1da8483623d33f9bbdc1420a452b437744e8db0a6483f12ba808111f05bd6d00fa8d503629ace0a37
SSDEEP

98304:/xuMDaXVUaj8T3dRzKyUBRIvf6HOAp8syn6ld8NY:/Cnj85tNcRuIZICd8W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-13_5cbc18d4d920a138f46a7f4e98186cdc_xiaoba

Files

2024-09-13_5cbc18d4d920a138f46a7f4e98186cdc_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 640KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 480KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dziyzh
Size: 374B - Virtual size: 374B

IMAGE_SCN_MEM_WRITE

.oyjkgd
Size: 283B - Virtual size: 283B

IMAGE_SCN_MEM_EXECUTE