The manhunt exe File Malware Analysis

Technical Analysis

File Name	manhunt.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.214.174
Database Version	2025-04-18 04:00:30 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	2d234f53adbd56388c467b6a8f3423ef
SHA1	f0c8e67479e35865d0138e07d6da2482e18bd2be
SHA256	6f2d8251d514b2ec07416729aa618100aec0bc87ee36b1f0fbec97406b28f757
SHA512	60527fb54032ddb1b0d3ea891dc72ee78e42ce99810f9eb4cf7730b1d3a91d668dcdba52d7b60c1ee085289864a8f81fac11fa2de0be4a65e01be9bf35f32f97
ImpHash	bb3d36ed307637de9b23bc04a208ad2f

PE Analysis

Basic Information

▼

Icon	Hash: ed3649e82797bc706b8388deeeee49d2 Fuzzy: bb2ed14d702c801b10bb8650454ff656 dHash: 78f0f0f094f0e071
Image Base	`0x00400000`
Entry Point	`0x00a183db`
Compilation Time	2013-11-06 14:28:48
Checksum	0x00609e7b (Actual: 0x00609d3b)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	10 libraries advapi32, dinput8, kernel32, user32, winmm, binkw32, d3d8, mss32, gdi32, version
Exports	0 functions
Resources	4 Resources
Sections	16 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	2,544,128 bytes	2,544,128 bytes	6.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`80155CE235196C314657EE7109577037`
`_rwcseg`	`0x0026f000`	1,105 bytes	1,536 bytes	4.35 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0C76278DB5699E53C2F2DCC6B6F1EED8`
`.rdata`	`0x00270000`	47,987 bytes	48,128 bytes	6.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D50DDAC6C18B48DDA29D29F43F7F4CC`
`.exc`	`0x0027c000`	1,420 bytes	1,536 bytes	5.03 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`0D98D6FA74E2E24B817045B1EFD966EB`
`.data`	`0x0027d000`	1,508,512 bytes	1,508,864 bytes	1.75 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`029DD8FDB28313E48FF7509B8294E817`
`.CRT`	`0x003ee000`	400 bytes	512 bytes	4.51 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`55A3826DBE3C62AFB758C0C977EB81A6`
`.asrc`	`0x003ef000`	106,512 bytes	107,008 bytes	3.74 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`32954FDC39C7616BB19A0CB5D647E069`
`_TEXT_HA`	`0x0040a000`	68,226 bytes	68,608 bytes	6.61 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8C95BA4CBA74F059AC3C8486446DBE38`
`.idata`	`0x0041b000`	4,768 bytes	5,120 bytes	5.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`AA4E547FAC008CE38CE4171B9B279A0D`
`_rwdseg`	`0x0041d000`	8 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.bss`	`0x0041e000`	46,803 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.xxxxx`	`0x0042a000`	153,572 bytes	153,600 bytes	6.80 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`D80F82A4EFBFC587DEAF6025C4BEE5B8`
`.prus`	`0x00450000`	827,392 bytes	824,832 bytes	2.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2C2B305F4ACEDF5AA994C6BF44502943`
`.izbf`	`0x0051a000`	1,028,172 bytes	1,028,608 bytes	0.01 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`532546088A35CCB15ABE0172CA517601`
`.idata`	`0x00616000`	7,354 bytes	7,680 bytes	5.29 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3E4CD4A7FA1A0B546DC81C22656951BA`
`.bind`	`0x00618000`	8,192 bytes	6,144 bytes	6.07 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8ABF2135DACFF2EEDC33B17A6378A7A8`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 4 (106,176 bytes)

Resource Type	Count	Total Size	Percentage
RT_BITMAP	1	98,344 bytes	92.6%
RT_ICON	1	7,336 bytes	6.9%
RT_DIALOG	1	476 bytes	0.4%
RT_GROUP_ICON	1	20 bytes	0%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The manhunt.exe File Analysis