The m64py 0 3 0 x86 64 setup exe (M64Py Setup) File Malware Analysis

The m64py-0.3.0-x86_64-setup.exe (M64Py Setup) File Analysis

Updated 6 months ago

Checked by Malware Check

m64py-0.3.0-x86_64-setup.exe

Hash Type	Value	Action
MD5	6a63e4f88a3505b78937ef820d414e5b
SHA1	8f08d794f4f10523853544e1d94ee250830fdd91
SHA256	09f8b50ebe4468f6f76f157ba88348696f60d22fd4abf30c1dae593ad00bf683
SHA512	c0f36263ec36365cc66801a822e5bf54cb33f7b769ade8524af1ca7de03a0a4bdac12c039778ae1e23f57a8d5835504ca82724ef61747139d0762817f14a08f6
ImpHash	40ab50289f7ef5fae60801f88d4541fc

Hash Type

Value

Action

MD5

6a63e4f88a3505b78937ef820d414e5b

SHA1

8f08d794f4f10523853544e1d94ee250830fdd91

SHA256

09f8b50ebe4468f6f76f157ba88348696f60d22fd4abf30c1dae593ad00bf683

SHA512

c0f36263ec36365cc66801a822e5bf54cb33f7b769ade8524af1ca7de03a0a4bdac12c039778ae1e23f57a8d5835504ca82724ef61747139d0762817f14a08f6

ImpHash

40ab50289f7ef5fae60801f88d4541fc

PE Analysis

Basic Information

▼

Icon	Hash: a0ef7c81eee20e999575764306184ccf Fuzzy: 8341e53a6f1047f3c936b4d36dc8f542 dHash: 5050d274ccec82ae
Image Base	`0x00400000`
Entry Point	`0x004a83bc`
Compilation Time	2024-07-12 07:26:53
Checksum	0x00000000 (Actual: 0x01f48380)
OS Version	6.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries kernel32, comctl32, user32, oleaut32, advapi32
Exports	2 functions
Resources	30 Resources
Sections	11 Sections

Version Information

▼

Comments	This installation was built with Inno Setup.
CompanyName
FileDescription	M64Py Setup
FileVersion	0.3.0
LegalCopyright	Author: Milan Nikolic <[email protected]>
OriginalFileName
ProductName	M64Py
ProductVersion	0.3.0
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	677,516 bytes	677,888 bytes	6.38 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B889D302F6FC48A904DE33D8D947AE80`
`.itext`	`0x000a7000`	7,012 bytes	7,168 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`588DD0A8AB499300D3701CBD11B017D9`
`.data`	`0x000a9000`	14,392 bytes	14,848 bytes	4.96 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5C0C76E77AEF52EBC6702430837CCB6E`
`.bss`	`0x000ad000`	29,272 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000b5000`	4,076 bytes	4,096 bytes	5.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`627340DFF539EF99048969AA4824FB2D`
`.didata`	`0x000b6000`	420 bytes	512 bytes	2.73 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`FD11C1109737963CC6CB7258063ABFD6`
`.edata`	`0x000b7000`	113 bytes	512 bytes	1.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7DE8CA0C7A61668A728FD3A88DC0942D`
`.tls`	`0x000b8000`	24 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000b9000`	93 bytes	512 bytes	1.39 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D84006640084DC9F74A07C2FF9C7D656`
`.reloc`	`0x000ba000`	69,544 bytes	69,632 bytes	6.71 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`A85FDA2741BD9417695DAA5FC5A9D7A5`
`.rsrc`	`0x000cb000`	69,632 bytes	69,632 bytes	3.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`75CD13FA2509EF6B5EE449E9CFDACD46`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 30 (67,913 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	13	55,173 bytes	81.2%
RT_STRING	11	8,336 bytes	12.3%
RT_RCDATA	3	844 bytes	1.2%
RT_GROUP_ICON	1	188 bytes	0.3%
RT_VERSION	1	1,412 bytes	2.1%
RT_MANIFEST	1	1,960 bytes	2.9%

Certificate Chain Analysis

▼

Certificate Information

Product	M64Py
Description	M64Py Setup
File Version	0.3.0
Copyright	Author: Milan Nikolic <[email protected]>

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	m64py-0.3.0-x86_64-setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.218.174
Database Version	2025-06-11 18:00:15 UTC

The m64py-0.3.0-x86_64-setup.exe (M64Py Setup) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification