2024-10-09_5e9cfba5cd3785efd1fad5f28dc86910_hacktools_xiaoba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_5e9cfba5cd3785efd1fad5f28dc86910_hacktools_xiaoba
Size

3.2MB
MD5

5e9cfba5cd3785efd1fad5f28dc86910
SHA1

8ac9db08eca46074f5b143d92f1934eb2b5b2635
SHA256

e2e54fa252a7f8d7bb1eeb5caa5018bc8a8ee9efb3749e6bfa4985342ce4cbad
SHA512

1e1e9cbabad9eca9abfb2a2e6fbb404e9060545be4dbb1ee7495b5854a80fd13abf65c01a64950d5132cf7c6a7548970a6698b544383b3cc43635fb9431a841b
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1Nj:DBIKRAGRe5K2UZv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-09_5e9cfba5cd3785efd1fad5f28dc86910_hacktools_xiaoba

Files

2024-10-09_5e9cfba5cd3785efd1fad5f28dc86910_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ