Gridinsoft Logo
File Icon

Spanish-V2023.exe Trojan AI Analysis

Updated 25 days ago
Checked by Malaware Check
Spanish-V2023.exe

Technical Analysis

File Name Spanish-V2023.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
Scanner Version 1.0.216.174
Database Version 2025-05-11 11:00:20 UTC
⚠

Trojan.Win32.AI.cl

Malware family: AI

AI-based detection enhances traditional signature-based antivirus methods by identifying behavioral patterns and anomalies. This approach improves detection of new and polymorphic malware variants that may evade conventional security measures.
N/A
Detection Rate
58,681,945
File Size (bytes)
2025-05-11
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d4006397ebc1147a2fee6edededcca36
SHA1
c4ebd5d371ee0199e0e7e5973f07aff5248bd7cb
SHA256
ea4dbadbb0b8d1b304951491cf94152aa9818b6d5eccb02da44444b206f4d1ef
SHA512
52c4acfaea910eceffc2a335cbe917933d3aace22ad0ace032a0fbe7b062eda3726ed1fa9535902e3c68c723a671dab8423276af31132b836b5858e2af55984e
ImpHash
1e4543b94f902fb1e062932841a7f90c

PE Analysis

Basic Information

▼
Icon
Hash: 411e8ee92d535bf7b28cc3aed587fd5d
Fuzzy: c50efc9d1af3d64352b9ad401e7de2e7
dHash: 70d4b2b2b2b2cc71
Image Base 0x00400000
Entry Point 0x0041da8b
Compilation Time 2015-11-18 09:15:19
Checksum 0x00000000 (Actual: 0x037fffd9)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
PDB Path d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb
Digital Signature No valid SignedData structure was found.
Imports 9 libraries
COMCTL32, SHLWAPI, KERNEL32, USER32, GDI32, COMDLG32, ADVAPI32, SHELL32, ole32
Exports 0 functions
Resources 19 Resources
Sections 4 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 166,484 bytes 166,912 bytes 6.72 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 06C96275E6EE6660732DF41E3F60E7FE
.rdata 0x0002a000 20,691 bytes 20,992 bytes 5.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A24B84A8F316720AC0A495805D407231
.data 0x00030000 136,232 bytes 5,632 bytes 3.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 97B33DE4F6C0DD8A60E7648D167A1C55
.rsrc 0x00052000 16,160 bytes 16,384 bytes 5.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D8A9D2D0E7DC22F8423FE9BDEEE47A40
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 19 (14,925 bytes)
Resource Type Count Total Size Percentage
RT_BITMAP 1 2,998 bytes
20.1%
RT_ICON 1 3,240 bytes
21.7%
RT_DIALOG 6 2,916 bytes
19.5%
RT_STRING 9 3,876 bytes
26%
RT_GROUP_ICON 1 20 bytes
0.1%
RT_MANIFEST 1 1,875 bytes
12.6%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Win32.AI.cl Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.AI.cl without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware