The CeoGG exe File Malware Analysis

Technical Analysis

File Name	CeoGG.exe
File Type	PE32+ executable (console) x86-64, for MS Windows
Scanner Version	1.0.216.174
Database Version	2025-05-15 22:00:26 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	17e8d8ce277eb1820139d8e5bc2ad0a8
SHA1	8a2c8184785fabbb613ecd9be080085a595d5f26
SHA256	a5d95273255bda668d24cf28cf0db845713416afa408c50d303cbe17c9dee940
SHA512	98fadbfca09abadcabc7a69ac897bfcdf2a524ea6b92759042028d0590ba1ae8f696a16e7ec507490873c75ef2d076b3fa686dd8afc956a953503e8f26b50545
ImpHash	33742414196e45b8b306a928e178f844

PE Analysis

Basic Information

▼

Icon	Hash: ba9ab5fdf2f22d3e8609cbb7204b667d Fuzzy: 9e8adee62b6b7a76bdf5d7f83e4dad63 dHash: 6030f0f0b296cc71
Image Base	`0x140000000`
Entry Point	`0x14000c380`
Compilation Time	2025-05-14 18:40:44
Checksum	0x014c9d69 (Actual: 0x014c9d69)
OS Version	6.0
PEiD Signatures	`PE32+ executable (console) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	3 libraries USER32, KERNEL32, ADVAPI32
Exports	0 functions
Resources	3 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	178,432 bytes	178,688 bytes	6.49 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DDB218B3AF0DB28D8F8BCC3735923F3A`
`.rdata`	`0x0002d000`	76,650 bytes	76,800 bytes	5.78 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D26C4E03F00869BE67C36C557D0939CB`
`.data`	`0x00040000`	21,328 bytes	3,584 bytes	1.81 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF337AA65A204C5ABE0C0E701B49E82C`
`.pdata`	`0x00046000`	8,976 bytes	9,216 bytes	5.35 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`DD5AB1DCD799C2595B239D6D81BB051F`
`.fptable`	`0x00049000`	256 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x0004a000`	21,404 bytes	21,504 bytes	7.95 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FA1FD20B94F75401677FEA94BB1D186A`
`.reloc`	`0x00050000`	1,908 bytes	2,048 bytes	5.28 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`92B90570165FE7604BC5905A06820C2B`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 3 (21,167 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	1	19,854 bytes	93.8%
RT_GROUP_ICON	1	20 bytes	0.1%
RT_MANIFEST	1	1,293 bytes	6.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The CeoGG.exe File Analysis