Gridinsoft Logo
File Icon

The Cuphead.exe File Analysis

Updated 2 months ago
Checked by Malaware Check
Cuphead.exe

Technical Analysis

File Name Cuphead.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-04-03 03:00:48 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
639,488
File Size (bytes)
2025-04-03
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2d0caa30ecc66d47ed1f4311909b1c02
SHA1
3ef4541938404a37a1eec16907ee5b159d6335c6
SHA256
316fa6d191994f83096e50884ad74e6359e42f6a532638ddffae542eeaac4e32
SHA512
a0df6194fe089ce39f9c6dc29e16108539a8ce8544ecfa8d0d1d9c5149d70bed744e050e408be5be12ed7f865c4ca58910946fe13fef241ff67d7533537a32d8
ImpHash
01e20355b5974d2d8443a426ccb6aad1

PE Analysis

Basic Information

▼
Icon
Hash: 3752679e43d4defce8f1267336c08eac
Fuzzy: 46188a9ee2e3a75e3cab64bdf7d7488a
dHash: b5593a274d190307
Image Base 0x00400000
Entry Point 0x004014b0
Compilation Time 2018-08-02 09:56:44
Checksum 0x00000000 (Actual: 0x000a7088)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\buildslave\unity\build\build\WindowsStandaloneSupport\Variations\win32_nondevelopment_mono\WindowsPlayer_x86_Master.pdb
Digital Signature No valid SignedData structure was found.
Imports 3 libraries
UnityPlayer, KERNEL32, ADVAPI32
Exports 2 functions
Resources 12 Resources
Sections 6 Sections

Version Information

▼
FileVersion 2017.4.9.7177439
ProductVersion 2017.4.9.7177439
Unity Version 2017.4.9f1_6d84dfc57ccf
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 43,047 bytes 43,520 bytes 6.60 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 074FC2989A17A1FB5F6895EDD47AAA7B
.rdata 0x0000c000 22,988 bytes 23,040 bytes 4.92 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5F369EC898D500C87A1116AD1264F15F
.data 0x00012000 4,860 bytes 2,048 bytes 2.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4DEDD907F63E82D370A998558CBFEBE7
.gfids 0x00014000 180 bytes 512 bytes 1.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 322AF251368A77AB643AB92FD349569D
.rsrc 0x00015000 565,464 bytes 565,760 bytes 4.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E856124FA573B7817755E1D8CA1D5AB4
.reloc 0x000a0000 3,552 bytes 3,584 bytes 6.51 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ CB6D20B8246713CE57937062E8A1DEEA
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 12 (564,765 bytes)
Resource Type Count Total Size Percentage
RT_ICON 9 562,568 bytes
99.6%
RT_GROUP_ICON 1 132 bytes
0%
RT_VERSION 1 444 bytes
0.1%
RT_MANIFEST 1 1,621 bytes
0.3%

Certificate Chain Analysis

▼
Certificate Information
File Version 2017.4.9.7177439

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware