The CrazyCattle3D exe (Godot Engine) Anna Mayberry LTD File Malware Analysis

The CrazyCattle3D.exe (Godot Engine) File Analysis

Updated 7 months ago

Checked by Malware Check

CrazyCattle3D.exe

Hash Type	Value	Action
MD5	528bf593b4c3e609fb368bfc514463ca
SHA1	807738dcb275ca271d970b9f6879743f6bd2b514
SHA256	56ecaac38e231e92ec50580a9e0473534349bcc12caff11a85933d7c74c2b11e
SHA512	81d6dff9652a5bbcb3817b2801017b66a28ef18c97c3b4e64a0f460eb5bc98cd5ec56e0a135d270e52161b82a82459ac91dcfd358e4c4f26623742f8cc7b0bd5
ImpHash	16ef91a4d0638c119c59d6af582a087f

Hash Type

Value

Action

MD5

528bf593b4c3e609fb368bfc514463ca

SHA1

807738dcb275ca271d970b9f6879743f6bd2b514

SHA256

56ecaac38e231e92ec50580a9e0473534349bcc12caff11a85933d7c74c2b11e

SHA512

81d6dff9652a5bbcb3817b2801017b66a28ef18c97c3b4e64a0f460eb5bc98cd5ec56e0a135d270e52161b82a82459ac91dcfd358e4c4f26623742f8cc7b0bd5

ImpHash

16ef91a4d0638c119c59d6af582a087f

PE Analysis

Basic Information

▼

Icon	Hash: 6658e629e460f976e2acc5486e0f2480 Fuzzy: eb6643e2db6435dfee2a3f7d03330b26 dHash: 7931754565716149
Image Base	`0x140000000`
Entry Point	`0x1400013d0`
Compilation Time	2025-03-25 23:21:35
Checksum	0x05accdd3 (Actual: 0x05acf1be)
OS Version	4.0
PEiD Signatures	`PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	23 libraries
Exports	3 functions
Resources	10 Resources
Sections	13 Sections

Version Information

▼

CompanyName	Anna Mayberry LTD
FileDescription	Godot Engine
FileVersion	1.0.0.0
ProductName	CrazyCattle3D
Licence	MIT
LegalCopyright	Anna Mayberry
Info	https://godotengine.org
ProductVersion	1.0.0.0
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	74,384,736 bytes	74,384,896 bytes	6.27 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`31BE6E541A62E0CF2F880E405A878C15`
`.data`	`0x046f2000`	934,560 bytes	934,912 bytes	0.79 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3D6E16179A7E44EFF42DE1FCE3BC0C74`
`.rdata`	`0x047d7000`	15,110,112 bytes	15,110,144 bytes	5.70 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E351A592DD035B69C2156E98540FA03E`
`pck`	`0x05640000`	8 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.pdata`	`0x05641000`	1,977,864 bytes	1,978,368 bytes	7.17 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`24BC2D99731822A368D983D7567B8FE4`
`.xdata`	`0x05824000`	2,178,652 bytes	2,179,072 bytes	4.79 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`AB5B890B53F53401A96801E1CFD57F4A`
`.bss`	`0x05a38000`	1,375,936 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.edata`	`0x05b88000`	178 bytes	512 bytes	2.44 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E3A64EFB9B1F3BD812577F72290B1A94`
`.idata`	`0x05b89000`	24,040 bytes	24,064 bytes	5.11 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D797FBC87FC6B490D3CBDC093A54F4F4`
`.CRT`	`0x05b8f000`	112 bytes	512 bytes	0.49 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`7AE853F1DEBADF1CBA200262E3EB5760`
`.tls`	`0x05b90000`	16 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x05b91000`	159,324 bytes	159,744 bytes	6.09 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A9BC4D4C2F966CEAA4D83D94B3AAD325`
`.reloc`	`0x05bb8000`	408,144 bytes	408,576 bytes	5.47 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`2C402C34F4A6715F8F9D1594821E884A`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 10 (158,699 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	157,222 bytes	99.1%
RT_GROUP_ICON	2	180 bytes	0.1%
RT_VERSION	1	684 bytes	0.4%
RT_MANIFEST	1	613 bytes	0.4%

Certificate Chain Analysis

▼

Certificate Information

Product	CrazyCattle3D
Description	Godot Engine
File Version	1.0.0.0
Copyright	Anna Mayberry

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	CrazyCattle3D.exe
File Type	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Scanner Version	1.0.214.174
Database Version	2025-04-19 19:00:22 UTC

The CrazyCattle3D.exe (Godot Engine) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification