The ＴＲＥ▼ＯＲ５ Plvi exe File Malware Analysis

Technical Analysis

File Name	ＴＲＥ▼ＯＲ５_Plvi.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-11-28 20:00:31 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	ae44c26760c7f63a43a1817d658a3eb8
SHA1	b29cdcab901d84c19a4fcb92bcad17c7ba5762f4
SHA256	4940c7d18a8194028e87533b7ea98d384708363c8265e3617f64b089def91d4a
SHA512	528fb398f1443624a89cab6d9fc73ac240d5dd7badce233be9a136035fd68023d6ca4b408402f31cf2f492c42595e09e94a341d810de740225ec4a252a551063
ImpHash	a65ab60bf5ed557ec66b7c8fc46d0ae6

PE Analysis

Basic Information

▼

Icon	Hash: 79100b4ab9856b8281adad4f62530e0f Fuzzy: 2ddf88685dcbbcea3af3f0f1ff1503d0 dHash: 2bd4c06972b2b448
Image Base	`0x140000000`
Entry Point	`0x14001181c`
Compilation Time	2025-10-24 17:58:54
Checksum	0x00000000 (Actual: 0x00052e9e)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`C:\Users\valle\Downloads\Trevor-main (1)\Trevor-main\x64\Release\ＴＲＥ▼ＯＲ５.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	19 libraries
Exports	0 functions
Resources	5 Resources
Sections	6 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	74,863 bytes	75,264 bytes	6.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6366CFFB83A73D186088F6ED34514EA2`
`.rdata`	`0x00014000`	40,266 bytes	40,448 bytes	5.16 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`199C8BB60DF2828CA93A059CBDD0F5F1`
`.data`	`0x0001e000`	3,336 bytes	1,536 bytes	3.78 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5362F30DBE05AFF62247E7A980F90550`
`.pdata`	`0x0001f000`	2,604 bytes	3,072 bytes	4.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`751FD9CF0F1DD6B52D2A3A81032B93A6`
`.rsrc`	`0x00020000`	199,704 bytes	200,192 bytes	6.27 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`08C93E60928CE3F4DFA02B4EA2950E13`
`.reloc`	`0x00051000`	240 bytes	512 bytes	3.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`F57B99164CE185FF5B2A39E04E246B6B`

Resource Analysis

▼

Total Resources: 5 (199,293 bytes)

Resource Type	Count	Total Size	Percentage
WAVE	1	71,388 bytes	35.8%
RT_BITMAP	1	59,880 bytes	30%
RT_ICON	1	67,624 bytes	33.9%
RT_GROUP_ICON	1	20 bytes	0%
RT_MANIFEST	1	381 bytes	0.2%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The ＴＲＥ▼ＯＲ５_Plvi.exe File Analysis