2024-09-15_305341c5e589b41f10b760f53ea89fa2_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-15_305341c5e589b41f10b760f53ea89fa2_hacktools_xiaoba
Size

3.2MB
MD5

305341c5e589b41f10b760f53ea89fa2
SHA1

373b0f393d8a540b10abe91ac8132c9c24d97e4d
SHA256

906337426ee0cb23d1a44f6bc8f54d10c336cd0ff4a770d4f0fae5e6cea76ca2
SHA512

00c6418441ab5a536c31268e64ba839d6c06ebdcc11aced550e57ebd4d04520859bc2465f8e8983b293fdabc40700259f9694cc80a96cd9e9f71233fb97e2025
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Nv:DBIKRAGRe5K2UZr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-15_305341c5e589b41f10b760f53ea89fa2_hacktools_xiaoba

Files

2024-09-15_305341c5e589b41f10b760f53ea89fa2_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ