The GameAssembly dll File Malware Analysis

Technical Analysis

File Name	GameAssembly.dll
File Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version	1.0.216.174
Database Version	2025-05-09 03:00:23 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	116545eb0c546a714b22dc22510e485c
SHA1	259abd97f2b844a93ed80797eb93fd6e57681264
SHA256	8ad78a47316b2115918d021c2eeb80b86707c9103b9f2b48f908509acc8aee3f
SHA512	399539a6c7c299cd2a78341669758c712a33e51f89e524c19febad4ce8e1ed0137b1b1096f847f49a3c41fcdce48ab77ec517a12c91afb56a8a719683f39dada
ImpHash	e08062a2d76e29424df6a26c2e713da6

PE Analysis

Basic Information

▼

Image Base	`0x180000000`
Entry Point	`0x180518a70`
Compilation Time	2025-05-04 16:22:37
Checksum	0x00000000 (Actual: 0x058064aa)
OS Version	6.0
PEiD Signatures	`PE32+ executable (DLL) (GUI) x86-64, for MS Windows`
PDB Path	`C:\[Work]\Project2021\Library\Bee\artifacts\WinPlayerBuildProgram\h2jlf\GameAssembly.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	15 libraries
Exports	250 functions
Resources	0 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	5,546,216 bytes	5,546,496 bytes	6.19 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9CA9848404F81EB7DB5EFFD802FC8C87`
`il2cpp`	`0x0054c000`	66,040,636 bytes	66,040,832 bytes	6.53 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C558404693BA8F7DF6B084A1001C9D14`
`.rdata`	`0x04448000`	13,504,874 bytes	13,505,024 bytes	5.53 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`64627FB5EEE6944AC94447E9C8851932`
`.data`	`0x0512a000`	5,946,068 bytes	3,068,416 bytes	3.92 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`EDC17EF89D207D196BAAFA015184B870`
`.pdata`	`0x056d6000`	2,928,732 bytes	2,929,152 bytes	7.06 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`249F90F14A7950E38F9DEE532A1EB1CD`
`_RDATA`	`0x059a2000`	244 bytes	512 bytes	2.48 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1030D6CC30B4707322D0D8B083457B9A`
`.reloc`	`0x059a3000`	1,149,888 bytes	1,149,952 bytes	5.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`666BB88F279B98747B0262FDDBD604E8`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The GameAssembly.dll File Analysis