The Daymare 1998 v1.0 Plus 5 Trainer.exe (Daymare 1998 v1.0 Plus 5 Trainer) File Analysis

Updated 1 year ago

Checked by Malware Check

Daymare 1998 v1.0 Plus 5 Trainer.exe

Technical Analysis

File Name	Daymare 1998 v1.0 Plus 5 Trainer.exe
File Type	Win32 EXE
Magic Bytes	`PE32+ executable for MS Windows (GUI) Mono/.Net assembly`
SSDEEP Hash	24576:OzjjAUDH9Hh+A7Xo6X4Iezmj6txsr8mYL3DS:rk5hHro6Ve06TsI
Scanner Version	1.0.169.174
Database Version	2024-03-16 20:00:26 UTC

⚠

Suspicious File Detected

Detected by 11 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

17%

Detection Rate

1,235,456

File Size (bytes)

11/66

Engines Detected

2024-03-16

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	b263624d6428a5fd9af0361bcd2d7522
SHA1	6af4c86064c0102e6842252cf5d4de584f127762
SHA256	3a1a0316a24908cc0813c168bf38256f93b641bdae6d0509da2484a1c2703b63
SHA512	5c37d7c7f6480679bb999921738714dd664782aa4507611ba96d0c6f532b22cbe270b3b26d48db2927d2ac058cd5516223e3b64fa720b09edcf91f48529d1ee9
ImpHash	ee573d8629ad373d0fe4ce8f8b0c4e5d

Security Engines with Detections (11 of 66)

McAfee

Artemis!B263624D6428 Malicious

Sangfor

Trojan.Win32.Save.a Malicious

K7AntiVirus

Unwanted-Program ( 0055d9971 ) Malicious

K7GW

Unwanted-Program ( 0055d9971 ) Malicious

Cyren

W64/Trojan.GKB.gen!Eldorado Malicious

ESET-NOD32

a variant of Win64/GameHack.CT potentially unsafe Malicious

Sophos

3DMGAME Trainer (PUA) Malicious

McAfee-GW-Edition

BehavesLike.Win64.Dropper.th Malicious

SentinelOne

Static AI - Suspicious PE Malicious

AhnLab-V3

Unwanted/Win64.GameCheat.C4200600 Malicious

Fortinet

Riskware/GameHack Malicious

55 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: 7249d5fc6221a5b21411aa2ad27aa387 Fuzzy: a1c738eea59667290c83d00f50a19604 dHash: 70f8fc7a7e2eaa70
Image Base	`0x140000000`
Entry Point	`0x140026cf8`
Compilation Time	2019-09-18 19:42:51
Checksum	0x00000000 (Actual: 0x0012f18b)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	The PE file does not contain a certificate table.
Imports	8 libraries KERNEL32, USER32, SHELL32, OLEAUT32, mscoree, WININET, VERSION, WINMM
Exports	0 functions
Resources	12 Resources
Sections	6 Sections

Version Information

▼

CompanyName	3DMGAME
FileDescription	Daymare 1998 v1.0 Plus 5 Trainer
FileVersion	1.0.0.1
InternalName	Daymare 1998 v1.0 Plus 5 Trainer
LegalCopyright	FLiNG Copyright (C) 2019
OriginalFilename	Daymare 1998 v1.0 Plus 5 Trainer.exe
ProductName	Daymare 1998 v1.0 Plus 5 Trainer
ProductVersion	1.0.675.0
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	413,748 bytes	414,208 bytes	6.43 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`FD4726ED042107EA45F943C7EBEC8F46`
`.rdata`	`0x00067000`	170,148 bytes	170,496 bytes	4.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`77AAB4A3636E70139210902B86A64157`
`.data`	`0x00091000`	22,500 bytes	12,800 bytes	4.29 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`162033A8EE8CC27738F04EDA0301EC46`
`.pdata`	`0x00097000`	23,544 bytes	23,552 bytes	5.78 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8764D0E9D302C2A2ABDC49160C35EE95`
`.rsrc`	`0x0009d000`	608,136 bytes	608,256 bytes	7.24 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`17C09ADDFE78AE2AD3A9EBA4752280EE`
`.reloc`	`0x00132000`	4,924 bytes	5,120 bytes	5.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`0639BD3D8D43C932CB3189D06328E1CD`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 12 (607,275 bytes)

Resource Type	Count	Total Size	Percentage
COVER	1	22,844 bytes	3.8%
REMOTE	2	296,452 bytes	48.8%
UI	1	174,080 bytes	28.7%
WAVE	2	22,222 bytes	3.7%
RT_ICON	3	90,092 bytes	14.8%
RT_GROUP_ICON	1	48 bytes	0%
RT_VERSION	1	884 bytes	0.1%
RT_MANIFEST	1	653 bytes	0.1%

Certificate Chain Analysis

▼

Certificate Information

Product	Daymare 1998 v1.0 Plus 5 Trainer
Description	Daymare 1998 v1.0 Plus 5 Trainer
File Version	1.0.0.1
Original Name	Daymare 1998 v1.0 Plus 5 Trainer.exe
Internal Name	Daymare 1998 v1.0 Plus 5 Trainer
Copyright	FLiNG Copyright (C) 2019

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

11 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1