The CrashBandicootNSaneTrilogy exe File Malware Analysis

Technical Analysis

File Name	CrashBandicootNSaneTrilogy.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.214.174
Database Version	2025-04-17 04:00:41 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	e36179f25fc91e1d6515460c16b275c9
SHA1	9eea320566840e5a9182335fd6c2db885c18be39
SHA256	cb2f8cd4c91ffc8dc26a820548d9489d28e9c284027134f6e65e5d6f06c1a979
SHA512	44388d1ad5e92bba9ee53d3636a5886547683a95ce3757e3a7b032646140906bd35944958f14e5e74703bff7a56789be9474afe09c2091b070650ab36e613240
ImpHash	be068a3f593eafee2ba980eaececb6ab

PE Analysis

Basic Information

▼

Icon	Hash: bc9581df61d24508669d3f9cd8a9063f Fuzzy: 7ed517b8ca823350637cc37fc0164d80 dHash: e8cacecdb89ccce0
Image Base	`0x140000000`
Entry Point	`0x1412f91f4`
Compilation Time	2018-06-27 17:53:46
Checksum	0x01c933ee (Actual: 0x01c94282)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`d:\Dev\IGS\Bang\mack\mainline\temporary\mack\win64-msvc-fin\code\engine\shared\apps\game\CrashBandicootNSaneTrilogy.pdb`
Digital Signature	The expected hash does not match the digest in SpcInfo
Imports	36 libraries
Exports	711 functions
Resources	7 Resources
Sections	10 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	20,443,484 bytes	20,443,648 bytes	6.49 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AE068CD952685E9DCA06E65BC6B9CF41`
`.rdata`	`0x01381000`	6,669,864 bytes	6,670,336 bytes	5.38 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`DD0238022908F69F9DB1A6C198B30BE6`
`.data`	`0x019de000`	1,408,728 bytes	466,432 bytes	2.96 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D3F4C3391A23AA51F140C7FC9BAA668A`
`.pdata`	`0x01b36000`	1,141,020 bytes	1,141,248 bytes	6.83 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A74ABF7C141AB11E52B7018D2139CB0F`
`.tls`	`0x01c4d000`	21 bytes	512 bytes	0.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`ADB00C88D5919BAB3C4B160CBF2ABED5`
`.gfids`	`0x01c4e000`	76 bytes	512 bytes	0.37 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7F883F7B7E24C7C54BD555E8FD8DEF96`
`_RDATA`	`0x01c4f000`	42,544 bytes	43,008 bytes	7.19 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A009680EB54B7036F989616E7626012E`
`.rsrc`	`0x01c5a000`	176,352 bytes	176,640 bytes	7.12 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B3ECC2FB8589ED2C5AC472577F8E34CE`
`.reloc`	`0x01c86000`	791,036 bytes	791,040 bytes	5.46 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`944B3D9EE2D5BB3D7EC17E5865C8686C`
`.bind`	`0x01d48000`	178,384 bytes	178,384 bytes	7.95 (Packed/Encrypted)	`IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A5B2324139113D9E98349785C923D929`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 7 (175,940 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	175,850 bytes	99.9%
RT_GROUP_ICON	1	90 bytes	0.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The CrashBandicootNSaneTrilogy.exe File Analysis