The VAL 0073(DL) exe File Malware Analysis

The VAL-0073(DL).exe File Analysis

Updated 2 hours ago

Checked by Malware Check

VAL-0073(DL).exe

Hash Type	Value	Action
MD5	1d11044da94ef48f313ac4086ec346a0
SHA1	2e2bf01bbed0baf8dde4018f1cedaadddcc8abdf
SHA256	36891f03d4374f33809dcfd9b45e7272c7fc76729aa47e4bd7bcda5875d058df
SHA512	838f2d047927bdd3f3ee64278a2ca57b1e249daa0c2dae9b353cf15c898902e653ada8fc9627dbf9e6217cf4ddde1443233fa98a8a97ae386fc5dda964a1a37c
ImpHash	48d4edf097eaba74a8a8901636fa7242

Hash Type

Value

Action

MD5

1d11044da94ef48f313ac4086ec346a0

SHA1

2e2bf01bbed0baf8dde4018f1cedaadddcc8abdf

SHA256

36891f03d4374f33809dcfd9b45e7272c7fc76729aa47e4bd7bcda5875d058df

SHA512

838f2d047927bdd3f3ee64278a2ca57b1e249daa0c2dae9b353cf15c898902e653ada8fc9627dbf9e6217cf4ddde1443233fa98a8a97ae386fc5dda964a1a37c

ImpHash

48d4edf097eaba74a8a8901636fa7242

PE Analysis

Basic Information

▼

Icon	Hash: 6bdc55324baa336534bacca2db0484ee Fuzzy: 437b95b9c170616812b6c7ea6a9731d9 dHash: c9a82c6048589698
Image Base	`0x00400000`
Entry Point	`0x004a1552`
Compilation Time	2025-08-29 08:14:11
Checksum	0x001a0525 (Actual: 0x001a0525)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`C:\作業\☆PG\MICo\Release\MICo.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	11 libraries
Exports	0 functions
Resources	20 Resources
Sections	5 Sections

Version Information

▼

FileVersion	1.0.0.0
LegalCopyright	Copyright(C)VALKYRIA
ProductVersion	1.0.0.1
Translation	0x0411 0x0411

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	762,643 bytes	762,880 bytes	6.56 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`4FE12DEEA1E304EAE64684D227494E7B`
`.rdata`	`0x000bc000`	169,778 bytes	169,984 bytes	5.77 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`CF0E8141A7A9EFA3CD8690B5D2901E9E`
`.data`	`0x000e6000`	193,600 bytes	46,592 bytes	4.30 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2BEB7F5320701ED7151684887BB2676A`
`.rsrc`	`0x00116000`	644,667 bytes	645,120 bytes	6.70 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D5D3EB94099841137864A7AD990BFE67`
`.reloc`	`0x001b4000`	56,540 bytes	56,832 bytes	6.82 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`0E033C8F97182F1355A9FF95E8B77CAF`

Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 20 (643,275 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	355,216 bytes	55.2%
RT_DIALOG	10	2,146 bytes	0.3%
RT_RCDATA	1	284,672 bytes	44.3%
RT_GROUP_ICON	1	90 bytes	0%
RT_VERSION	1	400 bytes	0.1%
RT_MANIFEST	1	751 bytes	0.1%

Certificate Chain Analysis

▼

Certificate Information

File Version	1.0.0.0
Copyright	Copyright(C)VALKYRIA

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	VAL-0073(DL).exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.231.174
Database Version	2025-12-19 19:00:38 UTC

The VAL-0073(DL).exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification