The E sumator exe File Malware Analysis

Technical Analysis

File Name	E_sumator.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.216.174
Database Version	2025-05-09 16:00:25 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	693b1a89d717e1cb5e61b7ccd2efedf6
SHA1	917090790990f55c5439b3dc765ce45801e6ac2f
SHA256	9cbcedde8a38d14674d8d34c83e3a944d2340dabebbcd7a00f8ee8a25dfff582
SHA512	8a8f7347834b94adf803fe86e1b7b794efc3d807ccd75cbd185b498d9dc124fbf010acb651fc2fcb5427776e4956b2326a811585e35e3006623e78fe2711d797
ImpHash	16c6a7011edcc8ddc90d94f5744c1cd2

PE Analysis

Basic Information

▼

Icon	Hash: be70f492191ad3aa5e6f0b439bbbed6e Fuzzy: adc951d96ae859968fa717f0293d738a dHash: 6024c4c4f4f4f1b0
Image Base	`0x00400000`
Entry Point	`0x00453e74`
Compilation Time	1992-06-19 22:22:17
Checksum	0x00000000 (Actual: 0x0006136d)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	7 libraries kernel32, user32, advapi32, oleaut32, gdi32, comctl32, comdlg32
Exports	0 functions
Resources	31 Resources
Sections	8 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`CODE`	`0x00001000`	339,644 bytes	339,968 bytes	6.53 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F9018B9DA773473E3EB3CC550C7E0BEE`
`DATA`	`0x00054000`	4,092 bytes	4,096 bytes	4.08 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`57CC9712FC6504E1A1D2E5B11D6A204F`
`BSS`	`0x00055000`	4,109 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00057000`	8,478 bytes	8,704 bytes	4.95 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`7BEE5B92E6FE77E31DAFF6E854218EC2`
`.tls`	`0x0005a000`	16 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0005b000`	24 bytes	512 bytes	0.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`65605437140B03BE3D6C70B323193FDC`
`.reloc`	`0x0005c000`	23,032 bytes	23,040 bytes	6.67 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`67065797FF74724E11A4DD688E18E2CF`
`.rsrc`	`0x00062000`	13,312 bytes	13,312 bytes	3.92 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`E0C4CF92195DADCDB73D8B7EC7813FFA`

Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 31 (11,476 bytes)

Resource Type	Count	Total Size	Percentage
RT_CURSOR	7	2,156 bytes	18.8%
RT_ICON	1	744 bytes	6.5%
RT_STRING	12	7,636 bytes	66.5%
RT_RCDATA	3	780 bytes	6.8%
RT_GROUP_CURSOR	7	140 bytes	1.2%
RT_GROUP_ICON	1	20 bytes	0.2%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The E_sumator.exe File Analysis