The Flatout exe File Malware Analysis

Technical Analysis

File Name	Flatout.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.216.174
Database Version	2025-05-10 10:00:18 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	6815ed7abaaff583791822d6e644d9e7
SHA1	b282eff8f7a1c93e176d14b2ab2c1d2b8a92d257
SHA256	c0cb1452896660aee65d4c1c1112b6efc1b91b5888defabe6c3e9d1206c8bfd1
SHA512	9f6d00aafbe12c7bb5f5285201df95e0e26797b34546ef43d7aa8d50547ef2bbd394227f3466175866d5eae1f32b2e4c9d45c409af2d9b4833f95d0470d96aea
ImpHash	4b25acca63a734671116650afdf44407

PE Analysis

Basic Information

▼

Icon	Hash: ce551b33214e4f59b33296a5bfb04a2e Fuzzy: 3d34073d5eae50ba6c7bc4748d6f1219 dHash: 2d27262bbb97970d
Image Base	`0x140000000`
Entry Point	`0x140a99a60`
Compilation Time	2017-03-29 15:26:44
Checksum	0x00000000 (Actual: 0x00f71092)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`F:\KT-FO\FlatOut\Bin\x64\Flatout64_s.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	35 libraries
Exports	10984 functions
Resources	27 Resources
Sections	9 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	11,781,542 bytes	11,781,632 bytes	6.47 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5F71D246F3243101923E4ECB04FB8D4A`
`.rdata`	`0x00b3e000`	3,129,616 bytes	3,129,856 bytes	6.34 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C6C177100FB25FD9ADA126772340545E`
`.data`	`0x00e3b000`	668,704 bytes	156,160 bytes	2.58 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CA1EA4BA5AD90ADD770C260F63218E28`
`.pdata`	`0x00edf000`	635,064 bytes	635,392 bytes	6.57 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2AEA4C5231691AF40E4398A072432522`
`.tls`	`0x00f7b000`	9 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`_RDATA`	`0x00f7c000`	7,152 bytes	7,168 bytes	7.14 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2ED898D2A8E968B20A1EF7F10CBF1ECE`
`.rsrc`	`0x00f7e000`	105,560 bytes	105,984 bytes	7.92 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7B898A3522B9AB93A3AB1A40C19C932B`
`.reloc`	`0x00f98000`	194,110 bytes	194,560 bytes	3.69 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`8E5B500F7517035F44122192E309FFDE`
`.bind`	`0x00fc8000`	145,104 bytes	145,104 bytes	7.99 (Packed/Encrypted)	`IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E8BD55F4EA96D4EC30493F7BC9EE3DDD`

Entropy Analysis Alert

2 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 27 (103,983 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	20	102,884 bytes	98.9%
RT_MENU	1	74 bytes	0.1%
RT_DIALOG	1	246 bytes	0.2%
RT_STRING	1	90 bytes	0.1%
RT_ACCELERATOR	1	16 bytes	0%
RT_GROUP_ICON	2	292 bytes	0.3%
RT_MANIFEST	1	381 bytes	0.4%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The Flatout.exe File Analysis