Static task
static1
Behavioral task
behavioral1
Sample
Xiaomi_No_Auth_Ultra.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Xiaomi_No_Auth_Ultra.exe
Resource
win10v2004-20231222-en
General
-
Target
Xiaomi_No_Auth_Ultra.7z
-
Size
1.4MB
-
MD5
fea8cb9a84621214e76f7bd92fe69c05
-
SHA1
624a65b10392475e61682cd8c292fa71c3490ba9
-
SHA256
706afb178cdfcd30ad9a5f31fd0b71918215b64badc8669bb93ca9350e6a0110
-
SHA512
cf0749da1fb40902d86c0ab4733f90401fdabebf7e966146a556deed37398a80976cec282247e2a7a511e2a4d4ef0462acf39ff482946656b6e21940c8421ca2
-
SSDEEP
24576:6HZPvPxYOmwZfoT2xp8ICRp9k5IAAwHb7uT9sQcoBZXI1hAR92z2gETkOAIjGiLX:uP1mwdxOI15IYCTD3bXRREz2gETkhIyi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Xiaomi_No_Auth_Ultra.exe
Files
-
Xiaomi_No_Auth_Ultra.7z.7z
Password: password
-
Xiaomi_No_Auth_Ultra.exe.exe windows:4 windows x86 arch:x86
Password: password
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ