AI CP[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AI CP.exe
Size

566KB
MD5

5378276b4d657df492b939c78acd4c03
SHA1

54ce34308219ca1afe48c0c71bf43d4b68faa2b3
SHA256

495bc32d3c87b61c77959e64eec598e3aa060ddd49aa8789d56529bfb5331189
SHA512

5ac614648f0fce096d185f8c96a77e9a3bc8dabe99b79861860d9befb9f46a00742e3823e019405d34047287658fd818cfb9ed14a4b42ff3e2c39ecb4bef1e11
SSDEEP

12288:zs70MHb6c+LEYiBDM/UOKM9usP2SSaEYN:6HWsBDMcOKCP2t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AI CP.exe

Files

AI CP.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Performance.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ