The DeSmuME 0 9 11 x86 exe File Malware Analysis

Technical Analysis

File Name	DeSmuME_0.9.11_x86.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-05-29 02:00:15 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	4dbb54975ebb94fe9f72ca741752b51c
SHA1	97c381a0d6862a26ea619dad2470a82e2fa512fd
SHA256	56f137e052d0df3f53d4399e5a91afc7494a1a33dc2a734a3ef211d0e43b31fc
SHA512	5f260267b1e6c2bff992f9471d6c9b660b708961e737d358f106adca3a7a803979c228a941de4d2990b3025207a3dec1d9eca87c80611f75c1270cb6a3d8ffe7
ImpHash	6172b11dc26d10c0885d1e6ed28729c2

PE Analysis

Basic Information

▼

Icon	Hash: 1f5f1fb0476babc8079df27b93efc192 Fuzzy: 9c490c02e24323af49b00eebc89d13aa dHash: b4a6baacb4686969
Image Base	`0x00400000`
Entry Point	`0x0049dd86`
Compilation Time	2015-04-13 06:50:30
Checksum	0x0031146d (Actual: 0x0031146d)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`B:\svn\desmume\branches\release_0_9_11\desmume\src\windows\__bins\DeSmuME_VS2010_release.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	17 libraries
Exports	2 functions
Resources	92 Resources
Sections	4 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	2,141,800 bytes	2,142,208 bytes	6.84 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`ADCF5DF8906F3E130972CB4E45CB59DB`
`.rdata`	`0x0020c000`	584,598 bytes	584,704 bytes	5.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`AC4B64A84291C0445C42E6D63F08D757`
`.data`	`0x0029b000`	104,860,672 bytes	363,008 bytes	1.56 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`642F2AFE43CC11501295112356EB413D`
`.rsrc`	`0x0669c000`	88,748 bytes	89,088 bytes	3.98 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5853832D4EFD324D0757521641CDF3F7`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 92 (84,048 bytes)

Resource Type	Count	Total Size	Percentage
RT_BITMAP	8	6,464 bytes	7.7%
RT_ICON	6	8,944 bytes	10.6%
RT_MENU	4	6,048 bytes	7.2%
RT_DIALOG	57	59,028 bytes	70.2%
RT_STRING	10	2,210 bytes	2.6%
RT_ACCELERATOR	1	80 bytes	0.1%
RT_GROUP_ICON	4	108 bytes	0.1%
RT_MANIFEST	1	691 bytes	0.8%
None	1	475 bytes	0.6%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The DeSmuME_0.9.11_x86.exe File Analysis