The vlc 3 0 8 win32 exe File Malware Analysis

Technical Analysis

File Name	vlc-3.0.8-win32.exe
File Type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Scanner Version	1.0.210.174
Database Version	2025-03-08 15:00:33 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	b20d600a630efa7afe2c8d3c979584f2
SHA1	a7739a03853ae71e41e519dde8f40e5eee04de87
SHA256	881f61dcf9026cf77ef0e1828a7531e8222dedc993fd82efa75cac8b53bcd486
SHA512	6f3e1f6a638dc6fb61749b14f60bb08525ca510710f7dd12291a44f8d1f80eb6f5267c2c5c54bacb2cce484d2a62f237b5eda5e819a7f3ae079755c1e10c1208
ImpHash	446b7557e42bfc440d0ca6f8a6a5f455

PE Analysis

Basic Information

▼

Icon	Hash: 8177a87a8fc2187c4cb5e86b7e2b4d41 Fuzzy: 72d01d24461e9958d72ec5f2fc08638c dHash: b2b2b271e8f0b68e
Image Base	`0x00400000`
Entry Point	`0x0040454c`
Compilation Time	2019-01-07 09:10:28
Checksum	0x026f1d7b (Actual: 0x026f1d7b)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows`
Digital Signature	The expected hash does not match the digest in SpcInfo
Imports	7 libraries ADVAPI32, COMCTL32, GDI32, KERNEL32, ole32, SHELL32, USER32
Exports	0 functions
Resources	58 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	37,664 bytes	37,888 bytes	5.98 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`4C7DDBE427533F4648366636D9B10C89`
`.data`	`0x0000b000`	192 bytes	512 bytes	1.44 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`19D680CF70B52F98553B4E39FDF33FEC`
`.rdata`	`0x0000c000`	28,444 bytes	28,672 bytes	7.16 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_32BYTES`	`22FE848B66FAE51C39DBE2E45899A767`
`.bss`	`0x00013000`	130,624 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00033000`	5,112 bytes	5,120 bytes	5.42 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`60B0C6929854EE0AAC36BF7328A597C0`
`.ndata`	`0x00035000`	212,992 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x00069000`	40,705,020 bytes	40,698,368 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`66AA0ACD9635CBFD84DF08FE0736CB02`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 58 (90,248 bytes)

Resource Type	Count	Total Size	Percentage
RT_BITMAP	1	1,638 bytes	1.8%
RT_ICON	6	73,062 bytes	81%
RT_DIALOG	49	14,196 bytes	15.7%
RT_GROUP_ICON	1	90 bytes	0.1%
RT_MANIFEST	1	1,262 bytes	1.4%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The vlc-3.0.8-win32.exe File Analysis