Gridinsoft Logo
File Icon

The test32_protected.exe File Analysis

Updated 2 months ago
Checked by Malaware Check
test32_protected.exe

Technical Analysis

File Name test32_protected.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-03-30 18:00:26 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
640,000
File Size (bytes)
2025-03-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
99c9b50babfbc723fb065ec9f47c4366
SHA1
694ee15618503152b17d2ba1decee201430347c5
SHA256
f89e77a5d703f1bbcc394baa6da49fdaf1a5901e09c342ec66ee1c1d8096b2bf
SHA512
141ed950b7d333badd931fef52557c39890a198419cdb7ca7214eca5e7b1da8c2d0c9983d042a83c302115921e8f59fcd83724dffccbe9a634b07d571ee9a062
ImpHash
436f7e4bc6bece183fb5bacd9f2ff7d3

PE Analysis

Basic Information

▼
Icon
Hash: 57537dbf952a68062da0813bdc704bc1
Fuzzy: 4744a7d5974483f259eac5f6e80978d6
dHash: 64dc9ea6a69e9c01
Image Base 0x00400000
Entry Point 0x0040529d
Compilation Time 2025-03-30 14:19:27
Checksum 0x00000000 (Actual: 0x000a3835)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 8 libraries
kernel32, user32, advapi32, oleaut32, gdi32, shell32, version, mscoree
Exports 0 functions
Resources 8 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00002000 40,960 bytes 16,896 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C2A04AFBC5373EF0A3B479AAAE965260
0x0000c000 16,384 bytes 512 bytes 0.56 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9AEAF924100F61D28BF2AE91052A99C6
0x00010000 8,192 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00012000 16,384 bytes 11,264 bytes 5.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BAB82161CE10A0797B232A204C4E1F52
0x00016000 3,137,536 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.data P 0x00314000 614,400 bytes 610,304 bytes 7.94 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FFA9159B8AD66F17431101F9E43E2ECD
Entropy Analysis Alert

2 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 8 (10,609 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 10,032 bytes
94.6%
RT_GROUP_ICON 1 90 bytes
0.8%
RT_MANIFEST 1 487 bytes
4.6%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware