Gridinsoft Logo
File Icon

The reshacker_setup.exe (Resource Hacker Setup) File Analysis

Updated 19 days ago
Checked by Malaware Check
reshacker_setup.exe

Technical Analysis

File Name reshacker_setup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-17 21:00:24 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
4,292,529
File Size (bytes)
2025-05-17
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
0fa54be54c421f87da625916342520bc
SHA1
177674653365c29f4da964beb023aa5a1fe06fbb
SHA256
b611be2f35cb44efd1c29df03e7ebe62bd556a500585680e1afa5e073eaf1756
SHA512
73edfef164fce793bd584f478948b5d9b7d4f2bb4d673bd5e331b7afe8585c3ff933d489cc6a302661d2478f121c9c9a77c68013c3df1f8aa8b49ea75ad9fe7a
ImpHash
5a594319a0d69dbc452e748bcf05892e

PE Analysis

Basic Information

▼
Icon
Hash: b7c2cdc3e80130d70b04f44eb80ec0a8
Fuzzy: 0fde2cb2f7b9c9287a5999aa3b8a3811
dHash: 222625ada6b5b112
Image Base 0x00400000
Entry Point 0x004b5eec
Compilation Time 2020-05-21 05:56:23
Checksum 0x00000000 (Actual: 0x00424ea2)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
Exports 3 functions
Resources 25 Resources
Sections 10 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName Angus Johnson
FileDescription Resource Hacker Setup
FileVersion
LegalCopyright
OriginalFileName
ProductName Resource Hacker
ProductVersion 5.2.8
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 734,724 bytes 735,232 bytes 6.35 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 364BC619A502D7F0A97ABA31E34B82D2
.itext 0x000b5000 5,764 bytes 6,144 bytes 5.97 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 282B489EAC439B258C98EC516C03C2CD
.data 0x000b7000 14,244 bytes 14,336 bytes 5.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 342785CF6BA6DE905CA393413E77B906
.bss 0x000bb000 28,064 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x000c2000 3,894 bytes 4,096 bytes 4.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A73D686F1E8B9BB06EC767721135E397
.didata 0x000c3000 420 bytes 512 bytes 2.76 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 41B8CE23DD243D14BEEBC71771885C89
.edata 0x000c4000 154 bytes 512 bytes 1.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 43F8D31E224BBD887C839F21E694B898
.tls 0x000c5000 24 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x000c6000 93 bytes 512 bytes 1.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8F2F090ACD9622C88A6A852E72F94E96
.rsrc 0x000c7000 107,740 bytes 108,032 bytes 6.51 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9F5989D5BCA4AED25A59730243DB7D85
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 25 (106,317 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 94,149 bytes
88.6%
RT_STRING 11 8,040 bytes
7.6%
RT_RCDATA 3 768 bytes
0.7%
RT_GROUP_ICON 1 118 bytes
0.1%
RT_VERSION 1 1,412 bytes
1.3%
RT_MANIFEST 1 1,830 bytes
1.7%

Certificate Chain Analysis

▼
Certificate Information
Product Resource Hacker
Description Resource Hacker Setup

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware