ProEditAI[.]ex#[.]exe | Triage

Sharing

General

Target

ProEditAI.ex#.exe
Size

2.0MB
MD5

78e6fe030031e0b319121f4af546c743
SHA1

f4a824edb08af666f6e3c7ebc29a2b64b96ba75e
SHA256

221c04745766b7dd65ff78d3590b2476f8de00c5fe17c1eb7d3aff34a9033df9
SHA512

f21d9f4d5c205b8a988b93cb6fbd6190bd7cba3934b0ff07c9ce1e67fb439dd017d87a73c0684353d63990b34cba2637d81d0418429088990b4bc8bb31cadfae
SSDEEP

49152:zVAbwcf0qplQ9rQ7JC+zQlQTLw9Lqb4tBr9mPrIdq1AT2U:ZAa+lQp85Q59mb47r9mDLm2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ProEditAI.ex#.exe

Files

ProEditAI.ex#.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\user\Desktop\NEW-ExpX\orel2\AppMsipPack64-Twitter\AppMSIpack\obj\Release\ProEditAI.pdb

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ