The kibou PTBR patcher exe File Malware Analysis

Technical Analysis

File Name	kibou_PTBR_patcher.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-01 18:00:33 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	22a3b0943381165efc880fbec70dd3b5
SHA1	4e518c131bfae1385ef04a8cd9aaada512400b8d
SHA256	4a4daa74a4bcc01c0c5c6a2f6137218507e05133b812bbcd04be772ab843799c
SHA512	15a529ca3d1259b971303da4a664beb3b9e24035018d96038d3250db5c8fab86cda713a96a54f20ea563f09c1cadbf1f2c3d4a6a398680ee14d77e1b4112f2dc
ImpHash	dcaf48c1f10b0efa0a4472200f3850ed

PE Analysis

Basic Information

▼

Icon	Hash: 1fc6336856c498fac1b16e530386ba45 Fuzzy: 22c73ade50a1d1451888f0ebd9d303a4 dHash: 50825098a2a6b678
Image Base	`0x140000000`
Entry Point	`0x14000da30`
Compilation Time	2025-11-30 23:57:49
Checksum	0x02e78d3a (Actual: 0x02e78d3a)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32
Exports	0 functions
Resources	8 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	179,584 bytes	179,712 bytes	6.47 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`79078DAE5994611672A1080749101869`
`.rdata`	`0x0002d000`	80,232 bytes	80,384 bytes	5.74 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`CEE098200BFDD528EB92871B5E8A559F`
`.data`	`0x00041000`	20,656 bytes	3,584 bytes	1.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E0A74FB607D827B7F2943FEBFE00C7D1`
`.pdata`	`0x00047000`	9,180 bytes	9,216 bytes	5.47 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8DE57D92D89FC5D4DB9828C2663F55EE`
`.fptable`	`0x0004a000`	256 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x0004b000`	134,012 bytes	134,144 bytes	4.54 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`84905565C4372CFA7E68CE1B92692D90`
`.reloc`	`0x0006c000`	1,908 bytes	2,048 bytes	5.26 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`66C54168D4D2AD0A461EE561D8A0C79D`

Resource Analysis

▼

Total Resources: 8 (133,535 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	132,152 bytes	99%
RT_GROUP_ICON	1	90 bytes	0.1%
RT_MANIFEST	1	1,293 bytes	1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The kibou_PTBR_patcher.exe File Analysis