The GeometryDash exe File Malware Analysis

Technical Analysis

File Name	GeometryDash.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.228.174
Database Version	2025-10-29 18:00:21 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	a0cf271bbf8d028b7ee5fbc429fce92b
SHA1	9604147c8a4cad0dfda9ef8d1de2d759e0e0c609
SHA256	a48650af2785567749c8e5dee1433acf71ddfffc3f602a8c0e3dbcc817098131
SHA512	c771393a5f9668cb55a006b4e51196eb8191b75b57461077ab37b5cc6fe83f7ce054c22bdcb6ca46ac9c64dea7555d94df627b85b2483db2696ef4ce9e413da0
ImpHash	67e7d0af4642b847ecd6987dcd434921

PE Analysis

Basic Information

▼

Icon	Hash: 00b88a118f4c173486132b5ea66250bb Fuzzy: 19106cc74e959831e43e53ced6179a87 dHash: 2763d9bdcb652d1f
Image Base	`0x140000000`
Entry Point	`0x1404b8288`
Compilation Time	2024-11-12 02:02:30
Checksum	0x00000000 (Actual: 0x00a1642d)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\BuildOutput64\GD\Release.win64\GeometryDash.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	23 libraries
Exports	0 functions
Resources	23 Resources
Sections	6 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	5,214,892 bytes	5,215,232 bytes	6.32 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CB66B7043D214BA8A23F5AA47D815DFA`
`.rdata`	`0x004fb000`	1,706,922 bytes	1,707,008 bytes	5.37 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`91EF14C8FB4A75A17A5C85A028CFC7AB`
`.data`	`0x0069c000`	36,576 bytes	27,648 bytes	4.13 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F7BEA519A5110E167D155D83F9E187A0`
`.pdata`	`0x006a5000`	176,172 bytes	176,640 bytes	6.15 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3891006299E0771DE42AE5B460FE8A65`
`.rsrc`	`0x006d1000`	3,289,808 bytes	3,290,112 bytes	5.19 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`DE4A680F67BA1B0A707D436F6092B840`
`.reloc`	`0x009f5000`	156,332 bytes	156,672 bytes	5.44 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`52DB91ACB4341D33BA5874D2431B0813`

Resource Analysis

▼

Total Resources: 23 (3,288,577 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	20	3,287,904 bytes	100%
RT_GROUP_ICON	2	292 bytes	0%
RT_MANIFEST	1	381 bytes	0%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The GeometryDash.exe File Analysis