XiaoMiFlash[.]exe | Triage

Sharing

General

Target

XiaoMiFlash.exe
Size

3.2MB
MD5

0ea26a7d18e1573b450d736539a7f9b5
SHA1

ccb8923e997a03f08d5653fd1b87b66c39156057
SHA256

eeff3d8bdb04d5bd0bb62e14268a86fb9caf09ee0d055548c8c6010552e58aca
SHA512

d022a04047849b462aaee6ae50f42e537ac546e8724dfc35a8dc25632b74f7615fe9286f9196bd5ea27fc63e069a75d94fc1e9bb4d4f917d83459e5d6f839f29
SSDEEP

49152:UXQq88chQqMMNaXEehpzOJTu1IXVJ0KzV5FqmHFln0AFpM2z4GZYYSQvzCqA0tFc:088cBNaXiJTDf0ACQzCqZ9N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XiaoMiFlash.exe

Files

XiaoMiFlash.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ