The driver booster exe File Malware Analysis

Technical Analysis

File Name	driver booster.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.219.174
Database Version	2025-06-23 22:00:14 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	7bbeba914b6e6262b76d1859571ef5c6
SHA1	cddeaba3c5303877f1664a2cfe200dadefd05234
SHA256	36159195cbadd99d2f25b36716a728bba4d790848bdf7e25b6f2f79afcf45729
SHA512	580aab4a34afd28e5cb718ef6a0f5a5c9fffe469fc2e64987e6d074a41954659f7ae76973c5b00a7e672abb017e54c2d4e4ea6cd9dec2f30e3a31bc6fd7cba2e
ImpHash	e3fd64aa4446c9293cbc88d0f6cebf06

PE Analysis

Basic Information

▼

Icon	Hash: 79b4f435ed36f20cf0567083cb58d8f7 Fuzzy: ef4dbb09fd5973ec45f26a1a2665946d dHash: 20cc96aaaa96cc20
Image Base	`0x140000000`
Entry Point	`0x140032770`
Compilation Time	2024-11-10 21:02:41
Checksum	0x00000000 (Actual: 0x022c03bb)
OS Version	5.2
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	3 libraries KERNEL32, OLEAUT32, gdiplus
Exports	0 functions
Resources	22 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	287,502 bytes	287,744 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B4F8524732F92739DF3FDADD44771072`
`.rdata`	`0x00048000`	76,316 bytes	76,800 bytes	5.26 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3279574090E10DDF62179EF408686DB9`
`.data`	`0x0005b000`	59,420 bytes	6,656 bytes	3.25 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5C5D19E676239C8EE9DAE0EC89E4E2B7`
`.pdata`	`0x0006a000`	12,492 bytes	12,800 bytes	5.53 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`62A717C8A9D7D0D72A91B8A1DCECF7E5`
`.didat`	`0x0006e000`	864 bytes	1,024 bytes	3.03 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1AD7313DE39CC84BE225F6E132C3BDBB`
`.rsrc`	`0x0006f000`	185,308 bytes	185,344 bytes	4.06 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`317E85511872F917B7E69FB9897DA8BC`
`.reloc`	`0x0009d000`	2,400 bytes	2,560 bytes	5.32 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`459599FA96145C7A1018D4113E4CC64E`

Resource Analysis

▼

Total Resources: 22 (183,919 bytes)

Resource Type	Count	Total Size	Percentage
PNG	2	8,430 bytes	4.6%
RT_ICON	1	165,640 bytes	90.1%
RT_DIALOG	6	2,916 bytes	1.6%
RT_STRING	11	5,038 bytes	2.7%
RT_GROUP_ICON	1	20 bytes	0%
RT_MANIFEST	1	1,875 bytes	1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The driver booster.exe File Analysis