The DayZ exe (Semantic Soft Ltd App Executable) Spero Cantab UK File Malware Analysis

The DayZ.exe (Semantic Soft Ltd App Executable) File Analysis

Updated 7 months ago

Checked by Malware Check

DayZ.exe

Hash Type	Value	Action
MD5	64fb5b36716d64bfa6c09531b61877e0
SHA1	a10e1bcd380d8bc5c4a2d403686dd9f3151a2e2f
SHA256	8ce5af42ae8ead279430a19cb680c51222f558d2cb6eec0cadbe3e9bbf7cd5fb
SHA512	43f506a301b49e3b5565bd8c3ad68564649ffd1a32266740bd97990dbecae58c5daa9698a3bb631bb4fa89fca35469a8b259604fc96b7a8c7786514c74cab8a4
ImpHash	b34f154ec913d2d2c435cbd644e91687

Hash Type

Value

Action

MD5

64fb5b36716d64bfa6c09531b61877e0

SHA1

a10e1bcd380d8bc5c4a2d403686dd9f3151a2e2f

SHA256

8ce5af42ae8ead279430a19cb680c51222f558d2cb6eec0cadbe3e9bbf7cd5fb

SHA512

43f506a301b49e3b5565bd8c3ad68564649ffd1a32266740bd97990dbecae58c5daa9698a3bb631bb4fa89fca35469a8b259604fc96b7a8c7786514c74cab8a4

ImpHash

b34f154ec913d2d2c435cbd644e91687

▼

Icon	Hash: 6f32d89ddf3b2c1f3f04b561cb57dbee Fuzzy: 19e8d0931429c05da50b0439ba4f9b0c dHash: b26dd2b8b4d62992
Image Base	`0x00400000`
Entry Point	`0x0040338f`
Compilation Time	2018-12-15 22:26:14
Checksum	0x00000000 (Actual: 0x0466fd76)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive`
Digital Signature	OK
Imports	7 libraries KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32
Exports	0 functions
Resources	26 Resources
Sections	5 Sections

▼

CompanyName	Spero Cantab UK
FileDescription	Semantic Soft Ltd App Executable
FileVersion	3.79.158.2828
LegalCopyright	Copyright © 2024 Spero Cantab UK
ProductName	DayZ
ProductVersion	3.79.158
Translation	0x0409 0x04e4

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	26,151 bytes	26,624 bytes	6.45 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7618D4C0CD8BB67EA9595B4266B3A91F`
`.rdata`	`0x00008000`	5,282 bytes	5,632 bytes	5.03 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EECAC1FED9CC6B447D50940D178404D8`
`.data`	`0x0000a000`	462,840 bytes	1,536 bytes	4.04 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DB8F31A08A2242D80C29E1F9500C6527`
`.ndata`	`0x0007b000`	1,196,032 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x0019f000`	74,152 bytes	74,240 bytes	7.40 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`407C93F5D3363E8EA327001F7882199F`

1 section(s) with elevated entropy (≥6.5) - possible compression

▼

Total Resources: 26 (72,705 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	5	65,095 bytes	89.5%
RT_DIALOG	18	5,808 bytes	8%
RT_GROUP_ICON	1	76 bytes	0.1%
RT_VERSION	1	656 bytes	0.9%
RT_MANIFEST	1	1,070 bytes	1.5%

▼

Product	DayZ
Description	Semantic Soft Ltd App Executable
File Version	3.79.158.2828
Signing Date	07:02 AM 12/19/2024 (360 days ago)
Verification Status	Signed
Signers	Semantic Soft Ltd; SSL.com Code Signing Intermediate CA RSA R1; SSL.com Root Certification Authority RSA
Counter Signers	SSL.com Timestamping Unit 2024 E1; SSL.com Timestamping Issuing RSA CA R1; SSL.com Root Certification Authority RSA
Copyright	Copyright © 2024 Spero Cantab UK