The BGamerT5 exe File Malware Analysis

Technical Analysis

File Name	BGamerT5.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-11-24 22:00:27 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	886e8e7687e97da537980d5176bb4e26
SHA1	e692bb410e77e991a0499047bee9582bfb1e85c5
SHA256	025ad6ee252a974f12d32df8fe64ca121e8828e5fb5c7d88d9543e4cf3f29f86
SHA512	15b55c8ce1987f41acfb1aef9519e36765f2056314572464e31ec4ab838759b248059d968c1aac4b37e3d691c0218b93aec2d409927b555854a691ba723febcf
ImpHash	c4e1aa7a1cbeff7f7b939ba10eb1c37f

PE Analysis

Basic Information

▼

Icon	Hash: 61c2ddbe742a2f3e1492302877c0d6f0 Fuzzy: 8b9fcd47abd9f49aabbd06d1910f0fc6 dHash: f0c8c0f0d4696969
Image Base	`0x00400000`
Entry Point	`0x0096da57`
Compilation Time	2011-09-01 23:06:57
Checksum	0x007baedf (Actual: 0x007c0647)
OS Version	5.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`C:\projects_pc\cod\codsrc\src\obj\t5\CoDSteam_CEG_bin\BlackOps.pdb`
Digital Signature	The expected hash does not match the digest in SpcInfo
Imports	16 libraries
Exports	0 functions
Resources	10 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	5,904,912 bytes	5,905,408 bytes	6.73 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EC3A47E481E96F61998DC81563B99654`
`.rdata`	`0x005a3000`	1,869,498 bytes	1,869,824 bytes	6.83 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`57E46A00DB5D46AF2E0D5388C9B95DD0`
`.data`	`0x0076c000`	61,814,468 bytes	238,592 bytes	3.51 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E2676ACD7F182597640FBC42675CE90A`
`.tls`	`0x04260000`	109 bytes	512 bytes	0.04 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`05CD60205149D8F1BF53C4396765FC0D`
`.rodata`	`0x04261000`	1,904 bytes	2,048 bytes	3.73 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`6B15B62292DE445D9D3B3961FD0619FE`
`.version`	`0x04262000`	4 bytes	512 bytes	0.08 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E0C4D73DE06653B9A9A91649F26A0BB0`
`.rsrc`	`0x04263000`	78,020 bytes	78,336 bytes	7.86 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C4732698F098DBA5FD0441C7BA90B1BB`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 10 (77,333 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	5	77,159 bytes	99.8%
RT_STRING	1	50 bytes	0.1%
RT_RCDATA	3	48 bytes	0.1%
RT_GROUP_ICON	1	76 bytes	0.1%

Certificate Chain Analysis

▼

Certificate Information

Verification Status	The digital signature of the object did not verify.
Signers	Valve Corporation; VeriSign Class 3 Code Signing 2004 CA; VeriSign Class 3 Public Primary CA

Certificate Chain Summary

Certificate #1 Primary

Validity Period: 1996-01-29 00:00:00 → 2028-08-01 23:59:59

Signature Algorithm: 1.2.840.113549.1.1.2

Serial Number: 70 BA E4 1D 10 D9 29 34 B6 38 CA 7B 03 CC BA BF

VeriSign Class 3 Code Signing 2004 CA #2 Chain

Validity Period: 2004-07-16 00:00:00 → 2014-07-15 23:59:59

Signature Algorithm: sha1RSA

Serial Number: 41 91 A1 5A 39 78 DF CF 49 65 66 38 1D 4C 75 C2

Valve Corporation #3 Chain

Validity Period: 2009-04-20 00:00:00 → 2012-04-19 23:59:59

Signature Algorithm: sha1RSA

Serial Number: 6C 40 9E 48 C3 2B 0D 11 00 F8 0B 9D 29 BC 1F B9

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The BGamerT5.exe File Analysis