2024-10-12_40accfad4a6c23d4c51c74d18f04c394_hacktools_xiaoba | Triage

Sharing

General

Target

2024-10-12_40accfad4a6c23d4c51c74d18f04c394_hacktools_xiaoba
Size

3.2MB
MD5

40accfad4a6c23d4c51c74d18f04c394
SHA1

7fde4416a8200d0b4b8a9b46612f034d25f5eb27
SHA256

5f2719f35d9cceed68c1eeaf8751a38e5bbb5a25f4e8f7ab8a5e8b07e57cd7e9
SHA512

2ea6345b8bcc42d037e48e150c3619b88b5d3dba59c98c38566595a32efcf34432eae2762ad7ed5700a6a0838783af9493b86d675c1ad4ccd6b39fbd27bb99ef
SSDEEP

49152:6zG1BqCBGJdodXAGRe5CFHRoHgmAZf1NH:DBIKRAGRe5K2UZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_40accfad4a6c23d4c51c74d18f04c394_hacktools_xiaoba

Files

2024-10-12_40accfad4a6c23d4c51c74d18f04c394_hacktools_xiaoba
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 808KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ