The Kaiba PC exe File Malware Analysis

Technical Analysis

File Name	Kaiba_PC.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-06-08 21:00:22 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	b4160ad7b97d3c28cfb484ad53e7f4e1
SHA1	67367f7fca2218fda4959837ab0f2696e091b77a
SHA256	a829b16eee11356159850029f5a809886b47c33498ce1d849dd1591a603c0309
SHA512	68be34ba0b0776904df5076fc1fdf66f73f12e86dcfa68f3f35bba1005d84f1321e96ca62ad4576bfeeff59ee4a0cb06cf989f60a40c491c295f464f0d5c9623
ImpHash	a476e2f10a251af1695fb3d18ee7323e

PE Analysis

Basic Information

▼

Icon	Hash: 3e727739fb92d34da43a5e7ea1a19eec Fuzzy: 8486e4209851bda372f85e0d25e70a10 dHash: 654553732f69d3d2
Image Base	`0x00400000`
Entry Point	`0x0058af12`
Compilation Time	2004-01-27 07:07:56
Checksum	0x00000000 (Actual: 0x001b62ae)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	8 libraries KERNEL32, USER32, GDI32, ADVAPI32, ole32, OLEAUT32, WINMM, MSACM32
Exports	0 functions
Resources	14 Resources
Sections	4 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	1,687,552 bytes	1,687,552 bytes	6.59 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CA90692365881FFC5B704FAE79B854C2`
`.rdata`	`0x0019d000`	65,534 bytes	65,536 bytes	4.83 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`43B31DDE98C3E6FA9DFBDF83B63DDA65`
`.data`	`0x001ad000`	4,642,208 bytes	20,480 bytes	3.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`7CE1C797295A07B36F229F7844E2D1BF`
`.rsrc`	`0x0061b000`	12,216 bytes	12,288 bytes	4.94 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`374F281E5D9000F6B215CF9622F16C26`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 14 (11,354 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	5	9,416 bytes	82.9%
RT_DIALOG	5	1,810 bytes	15.9%
RT_STRING	1	40 bytes	0.4%
RT_GROUP_ICON	3	88 bytes	0.8%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The Kaiba_PC.exe File Analysis