The EnjoyOccur exe File Malware Analysis

Technical Analysis

File Name	EnjoyOccur.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version	1.0.213.174
Database Version	2025-04-12 19:00:29 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	c4a871e31f33af27e8771b710ae6cecc
SHA1	e1073b5e6c279abe4366efd5a3047a6481f68c05
SHA256	51b0d46b18b2dacb72b817342104f4fe14a2a423e4f3ef1600052b3c6fab8a8d
SHA512	d5938713c0cfb5d933ef3cf0311bc32fb29de4630702d9ee65a3654c0102864d7ecd0d38c14a3c3ae06f47c78b9d36c31e45168c122e9cc029f1fe1b186ae16d
ImpHash	bf95d1fc1d10de18b32654b123ad5e1f

PE Analysis

Basic Information

▼

Icon	Hash: 4e2ed6e2109b6b83aad9ac5e3cb8bb15 Fuzzy: d15e23b1990dc93ab7020b0c2dcba57b dHash: 71fc783abafcccf9
Image Base	`0x00400000`
Entry Point	`0x004033e9`
Compilation Time	2010-04-10 12:19:23
Checksum	0x00000000 (Actual: 0x0013082e)
OS Version	5.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive`
Digital Signature	The expected hash does not match the digest in SpcInfo
Imports	8 libraries KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION
Exports	0 functions
Resources	8 Resources
Sections	5 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	25,152 bytes	25,600 bytes	6.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`1A752074FCD11165F6F148EA63EBE068`
`.rdata`	`0x00008000`	6,346 bytes	6,656 bytes	4.88 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7EB0899A4B6211F8BC545228417D92AD`
`.data`	`0x0000a000`	419,452 bytes	512 bytes	1.36 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B0B1D7C362F8CC76541B7FCE5014E602`
`.ndata`	`0x00071000`	528,384 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x000f2000`	123,952 bytes	124,416 bytes	7.85 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8FFC4AF6492268BDFD628F8F22320B2C`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 8 (123,438 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	3	122,030 bytes	98.9%
RT_DIALOG	3	636 bytes	0.5%
RT_GROUP_ICON	1	48 bytes	0%
RT_MANIFEST	1	724 bytes	0.6%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The EnjoyOccur.exe File Analysis