Static task
static1
Behavioral task
behavioral1
Sample
VideoAI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VideoAI.exe
Resource
win10v2004-20240426-en
General
-
Target
VideoAI.exe
-
Size
674.5MB
-
MD5
bdefc879ba2039e3eb4f5ac9efce2fd2
-
SHA1
d0f5d03db5720d40d6cb6b835e6d45c0fb82df7a
-
SHA256
337345fd9e0146c55ecdb815dadcdb6d7befa4f80f050a3fb2852a051cf7c5b3
-
SHA512
f5bdeafa00f368e0909f4de2673d7ebb6d876267be48945c3ff33717a402f70402a269b7d412659f3fbb73538965fe432d22ff6dc00890f64f4bccd6f6d6445b
-
SSDEEP
12582912:Tf/iamCR1AnmFB8tjsUpHGL7jFEHVazqiweOgzWVZh39:LrR1d8sUNGLy1a+iTOgzWVZht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VideoAI.exe
Files
-
VideoAI.exe.exe windows:6 windows x64 arch:x64
e81509ea25035b4144f6b79db66f0d62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
OpenProcess
GetLastError
DuplicateHandle
GetCommandLineW
OpenFileMappingW
MapViewOfFile
SetEvent
UnmapViewOfFile
CloseHandle
GetVersionExW
GetSystemInfo
VirtualQuery
GetCommandLineA
CreateFileW
CreateFileMappingW
GetFileSizeEx
VirtualAlloc
VirtualFree
LoadLibraryW
SetEnvironmentVariableW
ExitProcess
GetModuleHandleA
RtlAddFunctionTable
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xcpad Size: - Virtual size: 2.7MB
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ