The pico 8 0 2 6 setup exe File Malware Analysis

Technical Analysis

File Name	pico-8_0.2.6_setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version	1.0.217.174
Database Version	2025-06-02 08:00:19 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	e6d398348198827298cc320dd59539a4
SHA1	bc40a8aadf2dc71f39067051ebf64b6455e78000
SHA256	956520c1f8568c5eca187e0e8de5e91968e5eef4f53b0798dc0795bf79c9d511
SHA512	b39b5561ecfeff28539a08ab1f4ea2a62d949e97b7bf2e55ec1220911d2d69dabdd95b7560323d49869147c838d651a60f0dc5d91e2829da458974d76b7faebb
ImpHash	3abe302b6d9a1256e6a915429af4ffd2

PE Analysis

Basic Information

▼

Icon	Hash: ededff98662a85c64089ca7bf8a7f906 Fuzzy: 06d127e552b00921f96d8446e5a454bb dHash: 71c08cf8d8dcc870
Image Base	`0x00400000`
Entry Point	`0x004031d6`
Compilation Time	2018-12-15 22:24:22
Checksum	0x00000000 (Actual: 0x007bfd74)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive`
Digital Signature	No valid SignedData structure was found.
Imports	7 libraries KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32
Exports	0 functions
Resources	14 Resources
Sections	5 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	24,333 bytes	24,576 bytes	6.45 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A04138503CBCC902263BEDC7FEDD6947`
`.rdata`	`0x00007000`	4,688 bytes	5,120 bytes	5.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4856BBF2A79B612F639EBD55D68C4D02`
`.data`	`0x00009000`	108,568 bytes	1,024 bytes	5.13 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`06C5105864978DF88E34770EEFADA5DA`
`.ndata`	`0x00024000`	36,864 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x0002d000`	17,224 bytes	17,408 bytes	5.95 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2273F40185E040F81AB6937231A5B917`

Resource Analysis

▼

Total Resources: 14 (16,426 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	7	13,784 bytes	83.9%
RT_DIALOG	5	1,468 bytes	8.9%
RT_GROUP_ICON	1	104 bytes	0.6%
RT_MANIFEST	1	1,070 bytes	6.5%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The pico-8_0.2.6_setup.exe File Analysis