VideoAI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VideoAI.exe
Size

674.0MB
MD5

1321bccf42c0771b4a91c1040bbda14a
SHA1

77f0fdf8c23cc4f6eb18e132444256249f027647
SHA256

a5ed7731cd8ee5d4d08fcbe4ce11f277dae315cfe3b42042060dc018d8302b48
SHA512

88535d1259fc0894bbaf14921f39cfa6e5c95da39aa11eca14fb2bd2139c3f2c9f78674f5a7be305938f78882cb1e9ead4f877ed9c01b5fd03e2da1ef1d70471
SSDEEP

12582912:+NEW0ef3Xj6C8Nw/6zR/L4/hYoDc/041BCavHFi/U2GbTca0y:EPPH8u/6zRsJYo4/5b8/U2Gqy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VideoAI.exe

Files

VideoAI.exe
.exe windows:6 windows x64 arch:x64

Password: Kokokoko19

e81509ea25035b4144f6b79db66f0d62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
OpenProcess
GetLastError
DuplicateHandle
GetCommandLineW
OpenFileMappingW
MapViewOfFile
SetEvent
UnmapViewOfFile
CloseHandle
GetVersionExW
GetSystemInfo
VirtualQuery
GetCommandLineA
CreateFileW
CreateFileMappingW
GetFileSizeEx
VirtualAlloc
VirtualFree
LoadLibraryW
SetEnvironmentVariableW
ExitProcess
GetModuleHandleA
RtlAddFunctionTable

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcpad
Size: - Virtual size: 2.5MB

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ