Rapport d'analyse du fichier manhunt exe

Analyse technique

Nom du fichier	manhunt.exe
Type de fichier	PE32 executable (GUI) Intel 80386, for MS Windows
Version du scanner	1.0.214.174
Version de la base de données	2025-04-18 04:00:30 UTC

Scanner un autre fichier

Identification du fichier

Type de hachage	Valeur	Action
MD5	2d234f53adbd56388c467b6a8f3423ef
SHA1	f0c8e67479e35865d0138e07d6da2482e18bd2be
SHA256	6f2d8251d514b2ec07416729aa618100aec0bc87ee36b1f0fbec97406b28f757
SHA512	60527fb54032ddb1b0d3ea891dc72ee78e42ce99810f9eb4cf7730b1d3a91d668dcdba52d7b60c1ee085289864a8f81fac11fa2de0be4a65e01be9bf35f32f97
ImpHash	bb3d36ed307637de9b23bc04a208ad2f

Analyse PE

Informations de base

▼

Icône	Hachage: ed3649e82797bc706b8388deeeee49d2 Flou: bb2ed14d702c801b10bb8650454ff656 dHash: 78f0f0f094f0e071
Base d'image	`0x00400000`
Point d'entrée	`0x00a183db`
Heure de compilation	2013-11-06 14:28:48
Somme de contrôle	0x00609e7b (Réel: 0x00609d3b)
Version OS	4.0
Signatures PEiD	`PE32 executable (GUI) Intel 80386, for MS Windows`
Signature numérique	No valid SignedData structure was found.
Importations	10 bibliothèques advapi32, dinput8, kernel32, user32, winmm, binkw32, d3d8, mss32, gdi32, version
Exportations	0 fonctions
Ressources	4 Ressources
Sections	16 Sections

Sections PE

▼

Nom	Adresse virtuelle	Taille virtuelle	Taille brute	Entropie	Caractéristiques	MD5
`.text`	`0x00001000`	2,544,128 bytes	2,544,128 bytes	6.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`80155CE235196C314657EE7109577037`
`_rwcseg`	`0x0026f000`	1,105 bytes	1,536 bytes	4.35 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0C76278DB5699E53C2F2DCC6B6F1EED8`
`.rdata`	`0x00270000`	47,987 bytes	48,128 bytes	6.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D50DDAC6C18B48DDA29D29F43F7F4CC`
`.exc`	`0x0027c000`	1,420 bytes	1,536 bytes	5.03 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`0D98D6FA74E2E24B817045B1EFD966EB`
`.data`	`0x0027d000`	1,508,512 bytes	1,508,864 bytes	1.75 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`029DD8FDB28313E48FF7509B8294E817`
`.CRT`	`0x003ee000`	400 bytes	512 bytes	4.51 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`55A3826DBE3C62AFB758C0C977EB81A6`
`.asrc`	`0x003ef000`	106,512 bytes	107,008 bytes	3.74 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`32954FDC39C7616BB19A0CB5D647E069`
`_TEXT_HA`	`0x0040a000`	68,226 bytes	68,608 bytes	6.61 (Compressé)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8C95BA4CBA74F059AC3C8486446DBE38`
`.idata`	`0x0041b000`	4,768 bytes	5,120 bytes	5.22 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`AA4E547FAC008CE38CE4171B9B279A0D`
`_rwdseg`	`0x0041d000`	8 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.bss`	`0x0041e000`	46,803 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.xxxxx`	`0x0042a000`	153,572 bytes	153,600 bytes	6.80 (Compressé)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`D80F82A4EFBFC587DEAF6025C4BEE5B8`
`.prus`	`0x00450000`	827,392 bytes	824,832 bytes	2.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2C2B305F4ACEDF5AA994C6BF44502943`
`.izbf`	`0x0051a000`	1,028,172 bytes	1,028,608 bytes	0.01 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`532546088A35CCB15ABE0172CA517601`
`.idata`	`0x00616000`	7,354 bytes	7,680 bytes	5.29 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3E4CD4A7FA1A0B546DC81C22656951BA`
`.bind`	`0x00618000`	8,192 bytes	6,144 bytes	6.07 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8ABF2135DACFF2EEDC33B17A6378A7A8`

Alerte d'analyse d'entropie

2 section(s) avec entropie élevée (≥6.5) - compression possible

Analyse des ressources

▼

Total des ressources: 4 (106,176 octets)

Type de ressource	Nombre	Taille totale	Pourcentage
RT_BITMAP	1	98,344 octets	92.6%
RT_ICON	1	7,336 octets	6.9%
RT_DIALOG	1	476 octets	0.4%
RT_GROUP_ICON	1	20 octets	0%

Analyse de la chaîne de certificats

▼

Aucune signature numérique

Ce fichier n'est pas signé numériquement.

Implications de sécurité:

Impossible de vérifier l'identité de l'éditeur
Risque de sécurité accru lors de l'exécution de ce fichier
Peut déclencher des avertissements de sécurité sur certains systèmes

⚠ Ce fichier n'a pas de signature numérique ou la chaîne de certificats n'a pas pu être vérifiée.
Soyez prudent lors de l'exécution de fichiers non signés provenant de sources inconnues.

Statut de vérification du certificat

No valid SignedData structure was found.

Recommandation: Vérifiez la source du fichier et assurez-vous qu'il provient d'un éditeur de confiance.

Rapport d'analyse de manhunt.exe