The Game exe KADOKAWA File Malware Analysis

The Game.exe File Analysis

Updated 10 hours ago

Checked by Malware Check

Game.exe

Hash Type	Value	Action
MD5	5660b0f2fd655f422abcbed4db67a256
SHA1	5b3910c20a303673b9046202e34df812e1278f98
SHA256	b957fa63a07ecf060432c927219c747612614a5394f9bc5c501a1a9ffbe83efa
SHA512	d169045683734297ac9998970c80ad7ff46593aa359f0a4798b0250ecdfb53e4a2095f01df5b1d9dd18095ddfe52a228f1da6c7d12f597f9a66058d70a969269
ImpHash	8ee2dcb6c1b19781be83aa7bc3a6a1a5

Hash Type

Value

Action

MD5

5660b0f2fd655f422abcbed4db67a256

SHA1

5b3910c20a303673b9046202e34df812e1278f98

SHA256

b957fa63a07ecf060432c927219c747612614a5394f9bc5c501a1a9ffbe83efa

SHA512

d169045683734297ac9998970c80ad7ff46593aa359f0a4798b0250ecdfb53e4a2095f01df5b1d9dd18095ddfe52a228f1da6c7d12f597f9a66058d70a969269

ImpHash

8ee2dcb6c1b19781be83aa7bc3a6a1a5

PE Analysis

Basic Information

▼

Icon	Hash: c7f3151ad45aef524199a1bff6c77a21 Fuzzy: cdf619c8bcdaa5e916134efc9c04a60f dHash: 73eaf8b1a4dcd831
Image Base	`0x00400000`
Entry Point	`0x00eda4a0`
Compilation Time	2018-03-07 06:28:46
Checksum	0x00196893 (Actual: 0x002feec9)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	12 libraries
Exports	2 functions
Resources	50 Resources
Sections	11 Sections

Version Information

▼

CompanyName	KADOKAWA
FileDescription	game
InternalName	game_exe
LegalCopyright	Copyright 2017 Kadokawa. All rights reserved.
OriginalFilename	game.exe
ProductName	game
CompanyShortName	kadokawa
ProductShortName	kadokawa
LastChange	15b9f145354d863c03cebb6fb2d992d4213b9a05-
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
	`0x00001000`	1,028,096 bytes	483,840 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`EA4669D686C90463A903121E4B3E7A8D`
	`0x000fc000`	69,632 bytes	26,624 bytes	7.99 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`430B47766F95AC29F6DD634B1024DC4D`
	`0x0010d000`	311,296 bytes	84,480 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C0A148AC6BAF93747ECD691EFFE0DD7F`
	`0x00159000`	20,480 bytes	1,536 bytes	6.23 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0587CB5E4ED67E1A4A9853169C22165A`
	`0x0015e000`	4,096 bytes	512 bytes	0.74 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3899DB00395E065BD50BD3C4A1633ABE`
	`0x0015f000`	4,096 bytes	512 bytes	0.28 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`164EE2FED56AFE72DF4BDA5F7740587C`
	`0x00160000`	151,552 bytes	2,048 bytes	7.60 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B27F036CA68BE1863A91CF6696AD34A6`
	`0x00185000`	40,960 bytes	30,720 bytes	7.98 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DA7B86C08E1ABA055EA4E02A96A70021`
`.rsrc`	`0x0018f000`	102,400 bytes	101,888 bytes	7.59 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`FC74AADCCFADEF9506FC16DD5C8F7506`
	`0x001a8000`	7,483,392 bytes	195,584 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`86704E49F0AC6653B56D672319D74A29`
`.data`	`0x008cb000`	2,170,880 bytes	2,168,832 bytes	7.98 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF1CF0D9D45AB9D8C27CBC867412B008`

Entropy Analysis Alert

8 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 50 (147,628 bytes)

Resource Type	Count	Total Size	Percentage
GOOGLEUPDATEAPPLICATIONCOMMANDS	1	4 bytes	0%
RT_CURSOR	22	48,040 bytes	32.5%
RT_ICON	4	97,186 bytes	65.8%
RT_GROUP_CURSOR	20	428 bytes	0.3%
RT_GROUP_ICON	1	62 bytes	0%
RT_VERSION	1	840 bytes	0.6%
RT_MANIFEST	1	1,068 bytes	0.7%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	Game.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.223.174
Database Version	2025-08-20 17:00:27 UTC

The Game.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification