AltrusisService exe Trojan Altruistik 文件恶意软件分析: af9a50690148c1282fb05c259bec37d5

AltrusisService.exe Trojan Altruistik 分析

更新于 1 month ago

检查者 Malware Check

AltrusisService.exe

哈希类型	值	操作
MD5	af9a50690148c1282fb05c259bec37d5
SHA1	62ab368dcd843c1aa6d5071af4bafa06234b6b86
SHA256	11da3a30cfe823c51a8bf8fb7bafba67dc2527a02856d75e43c43c61181baf9c
SHA512	d096744f6e1c2a1529e74957d26640a488a7fe497345e7f5ef33a9c6ec2c3fa6984e7d2ced37a84b1420060d811203fb7834897a833f1cd0d9824e0689049309
ImpHash	892708a6c34bdbf4502163d58ca8f8ef

哈希类型

值

操作

MD5

af9a50690148c1282fb05c259bec37d5

SHA1

62ab368dcd843c1aa6d5071af4bafa06234b6b86

SHA256

11da3a30cfe823c51a8bf8fb7bafba67dc2527a02856d75e43c43c61181baf9c

SHA512

d096744f6e1c2a1529e74957d26640a488a7fe497345e7f5ef33a9c6ec2c3fa6984e7d2ced37a84b1420060d811203fb7834897a833f1cd0d9824e0689049309

ImpHash

892708a6c34bdbf4502163d58ca8f8ef

PE 分析

基本信息

▼

映像基址	`0x140000000`
入口点	`0x14016584c`
编译时间	2025-10-17 12:20:49
校验和	0x00352bce (实际: 0x00352bce)
操作系统版本	6.0
PEiD 签名	`PE32+ executable (GUI) x86-64, for MS Windows`
数字签名	Chain verification from CN=FutMiaSigner, O=FutMia Solutions LLC, ST=Florida, C=US (serial:-91014772263502172785387160570479741230, sha1:221fd53f17d27e799174db18b58569b764625f65) failed: The X.509 certificate provided is self-signed - "Common Name: FutMiaSigner, Organization: FutMia Solutions LLC, State/Province: Florida, Country: US"
导入	11 库
导出	0 函数
资源	2 资源
节	6 节

版本信息

▼

FileDescription	Altrusis Service
FileVersion	1.8.1.6
InternalName	Altrusis Service
OriginalFilename	AltrusisService
ProductVersion	1.8.1.6
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	1,677,900 bytes	1,678,336 bytes	6.45 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CB04845733608EBA068AD8EEBEDE8DE3`
`.rdata`	`0x0019b000`	1,586,474 bytes	1,586,688 bytes	6.28 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`65BADA561C4A49087F635A4B90787FDA`
`.data`	`0x0031f000`	156,180 bytes	129,536 bytes	4.43 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`428F146ABB1B991861AC621A74FE90C3`
`.pdata`	`0x00346000`	66,336 bytes	66,560 bytes	6.14 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2A8F383C83F2EF2B7E676DA6A80DCF17`
`.rsrc`	`0x00357000`	2,432 bytes	2,560 bytes	4.96 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3E545BC12AABF9696FEB047623045F62`
`.reloc`	`0x00358000`	6,960 bytes	7,168 bytes	5.37 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`3872F0AE28D3EE504A0E45C6B7A7BEC0`

资源分析

▼

资源总数: 2 (2,266 字节)

资源类型	数量	总大小	百分比
RT_VERSION	1	536 字节	23.7%
RT_MANIFEST	1	1,730 字节	76.3%

证书链分析

▼

无数字签名

此文件未进行数字签名。

安全影响:

无法验证发布者的身份
运行此文件时安全风险增加
可能在某些系统上触发安全警告

⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。

证书验证状态

Chain verification from CN=FutMiaSigner, O=FutMia Solutions LLC, ST=Florida, C=US (serial:-91014772263502172785387160570479741230, sha1:221fd53f17d27e799174db18b58569b764625f65) failed: The X.509 certificate provided is self-signed - "Common Name: FutMiaSigner, Organization: FutMia Solutions LLC, State/Province: Florida, Country: US"

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	AltrusisService.exe
文件类型	PE32+ executable (GUI) x86-64, for MS Windows
扫描器版本	1.0.229.174
数据库版本	2025-11-16 11:00:19 UTC

AltrusisService.exe Trojan Altruistik 分析

技术分析

Trojan.Win64.Altruistik.dd!c

扫描另一个文件

文件识别