The main (27) exe File Malware Analysis

Technical Analysis

File Name	main (27).exe
File Type	PE32+ executable (console) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-02 01:00:33 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	f432a1a615a4362ff68b99466f2f08cf
SHA1	6ca01efa5e53939830b52adb6ff1b3a7d164d901
SHA256	b58b82dd07a904a8b64db2f3b8e0f2f971bc152ef1f300ba80c4800cfdb33c80
SHA512	95bcaf8295a1e1a1d4e1ce50ff0c5350eeb9a4401a084ed9062903c5eb317f0b628eeb1ff5f40d1f229db8b78c03322267603ad3f6172d5f0bf48d04aa67fdc2
ImpHash	351592d5ead6df0859b0cc0056827c95

PE Analysis

Basic Information

▼

Icon	Hash: 4f31152553e94573b24704306f063cdf Fuzzy: 590fc5dc14ea32deca115e1e5d6ddcfc dHash: c0c9888c9649e896
Image Base	`0x140000000`
Entry Point	`0x14000cf30`
Compilation Time	2025-12-01 23:39:38
Checksum	0x0085a6c6 (Actual: 0x0085a6c6)
OS Version	6.0
PEiD Signatures	`PE32+ executable (console) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	3 libraries USER32, KERNEL32, ADVAPI32
Exports	0 functions
Resources	3 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	184,752 bytes	184,832 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`41C2B5E44758036E91A3F8D9B04C968E`
`.rdata`	`0x0002f000`	79,578 bytes	79,872 bytes	5.75 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`58661EE0DCA6EF376427D139527A3F49`
`.data`	`0x00043000`	20,656 bytes	3,584 bytes	1.83 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`03BE87F74B83CF5FB04C525B81B27C53`
`.pdata`	`0x00049000`	9,288 bytes	9,728 bytes	5.33 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`128CAF62F437B202260DA7396DDD0BF7`
`.fptable`	`0x0004c000`	256 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x0004d000`	69,172 bytes	69,632 bytes	4.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D3B1C8A87F22858E6CCAA0B21B6B9F49`
`.reloc`	`0x0005e000`	1,904 bytes	2,048 bytes	5.27 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`CA65027011CD43E1DCB6AC16B46171A4`

Resource Analysis

▼

Total Resources: 3 (68,937 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	1	67,624 bytes	98.1%
RT_GROUP_ICON	1	20 bytes	0%
RT_MANIFEST	1	1,293 bytes	1.9%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The main (27).exe File Analysis