The aer[s]id exe File Malware Analysis

Technical Analysis

File Name	aer[s]id.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-04 02:00:50 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	1b993a6709fca15b95a25fdb8ee6f7f2
SHA1	923b423c621eed8234acd4911111849a10da6ba5
SHA256	a67e64dc7b502d32942b55d2f7fbad1304bd5a1cf6d5bc3df3cf762f15e0842a
SHA512	0f057aa6aa23ede41ded89429d119ee2703530b064096357d2f1dabaa71c949ef885920bc425ceb588bba452cfd236a8cd96036f54ce107bfad33fc253feea37
ImpHash	559335ad1f2603573df558a8fee4c59d

PE Analysis

Basic Information

▼

Icon	Hash: b9a4b2c4eb29f3d0be422a7c14d082b5 Fuzzy: 78e817b0a2881d984960d15131b4fa8d dHash: c8808cc0c29cd41d
Image Base	`0x00400000`
Entry Point	`0x0044a0c7`
Compilation Time	2014-09-17 07:36:07
Checksum	0x00000000 (Actual: 0x043ee453)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`d:\onidev\hsp3hg\hsp3hg_rel\hsp3hg.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	13 libraries
Exports	0 functions
Resources	5 Resources
Sections	5 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	743,278 bytes	745,472 bytes	6.76 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`179CA26A50FB9F0269021A019E434845`
`.rdata`	`0x000b7000`	127,788 bytes	131,072 bytes	5.93 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`657E219E8A2037D1E8602BDE5D1F8EB1`
`.data`	`0x000d7000`	117,092 bytes	94,208 bytes	6.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`41519BDF72B56EC3A162132BEA01BBCD`
`.data1`	`0x000f4000`	2,272 bytes	4,096 bytes	2.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BD4929BB4EE6547E6217D41C6806E321`
`.rsrc`	`0x000f5000`	3,624 bytes	4,096 bytes	4.69 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`ACFA2C87163258C2CBA46112689307F6`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 5 (3,296 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	3	2,680 bytes	81.3%
RT_GROUP_ICON	1	48 bytes	1.5%
RT_MANIFEST	1	568 bytes	17.2%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The aer[s]id.exe File Analysis