The t6sp exe (Call of Duty(R): Black Ops II) Activision Publishing Inc File Malware Analysis

The t6sp.exe (Call of Duty(R): Black Ops II) File Analysis

Updated 1 month ago

Checked by Malaware Check

t6sp.exe

Hash Type	Value	Action
MD5	9e96e03e6115ff54f5bfa64377dbc818
SHA1	2eba6b66ade2afb38f7d4cf43a9df7379967e9a8
SHA256	9c41762e6ab9b583d50512262e8a683bbd5b6e785ff332d92a74f18b1b230048
SHA512	9a757593fcfc5043ee3f692d3e6bf39cd6b2b0e70f850afe98703d2c4d77934b38615ae1eb18cb474be1ba0d993a0bcc732a5e3aee6cd9681ba60c223e12f17d
ImpHash	0aa999ec5d6efaa5ebf6cba06ed5f021

Hash Type

Value

Action

MD5

9e96e03e6115ff54f5bfa64377dbc818

SHA1

2eba6b66ade2afb38f7d4cf43a9df7379967e9a8

SHA256

9c41762e6ab9b583d50512262e8a683bbd5b6e785ff332d92a74f18b1b230048

SHA512

9a757593fcfc5043ee3f692d3e6bf39cd6b2b0e70f850afe98703d2c4d77934b38615ae1eb18cb474be1ba0d993a0bcc732a5e3aee6cd9681ba60c223e12f17d

ImpHash

0aa999ec5d6efaa5ebf6cba06ed5f021

PE Analysis

Basic Information

▼

Icon	Hash: f5d78dac9feea5fac353ee90b10a7a52 Fuzzy: 05630f2eabe39dce2178c0f3a34e78fe dHash: ccccc868e8cccccc
Image Base	`0x00400000`
Entry Point	`0x0096b75c`
Compilation Time	2012-12-12 02:17:41
Checksum	0x00b05b98 (Actual: 0x00b01aea)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB Path	`c:\t6\code\src\obj\t6\codSteam_CEG_bin\t6sp.pdb`
Digital Signature	Insufficient data - 1 bytes requested but only 0 available while parsing asn1crypto.cms.SignerInfo
Imports	18 libraries
Exports	1 functions
Resources	30 Resources
Sections	9 Sections

Version Information

▼

CompanyName	Activision Publishing Inc.
FileDescription	Call of Duty(R): Black Ops II
FileVersion	1.0
LegalCopyright	(C) 2012 Activision Publishing Inc.
OriginalFilename	t6sp.exe
ProductName	Call of Duty(R): Black Ops II
ProductVersion	6
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	6,489,264 bytes	6,489,600 bytes	6.72 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`58F2606CDF83530883760E79C2AFC256`
`.conceal`	`0x00632000`	7,988 bytes	8,192 bytes	7.91 (Packed/Encrypted)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D20B52EBF73F84265A666FB5861F1841`
`.interpr`	`0x00634000`	26,156 bytes	26,624 bytes	6.33 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0590B9CB7C27FA426B04C7CC65F1CDD8`
`.rdata`	`0x0063b000`	1,621,023 bytes	1,621,504 bytes	5.10 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EC87E353C7FF53178B596C50FB5DA5BB`
`.data`	`0x007c7000`	56,351,716 bytes	3,099,136 bytes	0.56 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`4DBD9C0A809E4A904DDE373A89547B73`
`.tls`	`0x03d85000`	6,749 bytes	7,168 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5FFC7999C19F3F72EFEB883DB759C400`
`.version`	`0x03d87000`	4 bytes	512 bytes	0.08 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E0C4D73DE06653B9A9A91649F26A0BB0`
`.rodata`	`0x03d88000`	3,024 bytes	3,072 bytes	4.17 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2E8755D7E25888874D0483E87FC1DE1F`
`.rsrc`	`0x03d89000`	261,800 bytes	262,144 bytes	2.15 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`77EAE3E4D07B26D15640F3BBDEB28C2B`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 30 (260,082 bytes)

Resource Type	Count	Total Size	Percentage
RT_CURSOR	10	42,680 bytes	16.4%
RT_ICON	4	216,288 bytes	83.2%
RT_STRING	1	56 bytes	0%
RT_RCDATA	3	48 bytes	0%
RT_GROUP_CURSOR	10	200 bytes	0.1%
RT_GROUP_ICON	1	62 bytes	0%
RT_VERSION	1	748 bytes	0.3%

Certificate Chain Analysis

▼

Certificate Information

Product	Call of Duty(R): Black Ops II
Description	Call of Duty(R): Black Ops II
File Version	1.0
Original Name	t6sp.exe
Signing Date	12:00 AM 1/1/1601 (155019 days ago)
Verification Status	The digital signature of the object did not verify.
Copyright	(C) 2012 Activision Publishing Inc.

Certificate Chain Summary

DigiCert SHA2 Assured ID Code Signing CA #1 Primary

Validity Period: 2013-10-22 12:00:00 → 2028-10-22 12:00:00

Signature Algorithm: sha256RSA

Serial Number: 04 09 18 1B 5F D5 BB 66 75 53 43 B5 6F 95 50 08

Valve Corp. #2 Chain

Validity Period: 2017-06-22 00:00:00 → 2019-07-12 12:00:00

Signature Algorithm: sha256RSA

Serial Number: 06 39 47 97 BC 6C A1 9E F2 99 83 E3 67 56 B7 C6

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

Insufficient data - 1 bytes requested but only 0 available while parsing asn1crypto.cms.SignerInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	t6sp.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.212.174
Database Version	2025-04-08 19:01:15 UTC

The t6sp.exe (Call of Duty(R): Black Ops II) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification