The manhunt exe File Malware Analysis

Technical Analysis

File Name	manhunt.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.214.174
Database Version	2025-04-20 00:00:20 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	04a52e283a76132cc8b52d3af2319142
SHA1	9257986ce32b21fdd79ceff95f6d0c206d91c7b1
SHA256	5001b64f77690316330575fcfe6acd5c5115c5476c183ffec0d86779b0686b52
SHA512	54ca3703170b2133e151acb4ec19035d1ffc410dff1a5c15db6f0942bc37217cf7423638784649a48a57e78b9b2ba0ff1138db53735d8b68c2573bd6ac3a6f7a
ImpHash	bb3d36ed307637de9b23bc04a208ad2f

PE Analysis

Basic Information

▼

Icon	Hash: ed3649e82797bc706b8388deeeee49d2 Fuzzy: bb2ed14d702c801b10bb8650454ff656 dHash: 78f0f0f094f0e071
Image Base	`0x00400000`
Entry Point	`0x00851370`
Compilation Time	2013-11-06 14:28:48
Checksum	0x0060cf24 (Actual: 0x0060cf24)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	10 libraries advapi32, dinput8, kernel32, user32, winmm, binkw32, d3d8, mss32, gdi32, version
Exports	0 functions
Resources	4 Resources
Sections	15 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	2,544,128 bytes	2,544,128 bytes	6.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`80155CE235196C314657EE7109577037`
`_rwcseg`	`0x0026f000`	1,105 bytes	1,536 bytes	4.35 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0C76278DB5699E53C2F2DCC6B6F1EED8`
`.rdata`	`0x00270000`	47,987 bytes	48,128 bytes	6.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D50DDAC6C18B48DDA29D29F43F7F4CC`
`.exc`	`0x0027c000`	1,420 bytes	1,536 bytes	5.03 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`0D98D6FA74E2E24B817045B1EFD966EB`
`.data`	`0x0027d000`	1,508,512 bytes	1,508,864 bytes	1.75 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`029DD8FDB28313E48FF7509B8294E817`
`.CRT`	`0x003ee000`	400 bytes	512 bytes	4.51 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`55A3826DBE3C62AFB758C0C977EB81A6`
`.asrc`	`0x003ef000`	106,512 bytes	107,008 bytes	3.74 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`32954FDC39C7616BB19A0CB5D647E069`
`_TEXT_HA`	`0x0040a000`	68,226 bytes	68,608 bytes	6.61 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8C95BA4CBA74F059AC3C8486446DBE38`
`.idata`	`0x0041b000`	4,768 bytes	5,120 bytes	5.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`AA4E547FAC008CE38CE4171B9B279A0D`
`_rwdseg`	`0x0041d000`	8 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.bss`	`0x0041e000`	46,803 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.xxxxx`	`0x0042a000`	153,572 bytes	153,600 bytes	6.80 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`D80F82A4EFBFC587DEAF6025C4BEE5B8`
`.prus`	`0x00450000`	827,392 bytes	824,832 bytes	0.12 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3F704FD7C098CA1CC777D5DA0D95FBAC`
`.izbf`	`0x0051a000`	1,028,172 bytes	1,028,608 bytes	0.01 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`532546088A35CCB15ABE0172CA517601`
`.idata`	`0x00616000`	7,354 bytes	7,680 bytes	5.29 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3E4CD4A7FA1A0B546DC81C22656951BA`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 4 (106,176 bytes)

Resource Type	Count	Total Size	Percentage
RT_BITMAP	1	98,344 bytes	92.6%
RT_ICON	1	7,336 bytes	6.9%
RT_DIALOG	1	476 bytes	0.4%
RT_GROUP_ICON	1	20 bytes	0%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The manhunt.exe File Analysis