Zuoya GMK67 Keyboard Setup exe (ZUOYO GMK67 Driver Setup) ZUOYO 文件恶意软件分析

Zuoya GMK67 Keyboard Setup.exe (ZUOYO GMK67 Driver Setup) 文件分析

更新于 28 days ago

检查者 Malware Check

Zuoya GMK67 Keyboard Setup.exe

哈希类型	值	操作
MD5	6b1e5c7651c33030da74de2ff9190364
SHA1	600dbaf2a899dc812f9c1a2465b99db7d80c02aa
SHA256	4c0da3c450f93880ed7586617925dae9b13de1a8d62ebc738ff688de06ab8178
SHA512	65a19d568db26e00ef2aa05b7481094d7c64d4cdb4b673db9b45371e4c4d14919425f40181c3779d94bb9034846ed4a376901c7ac8d849d0d3971c1467cee633
ImpHash	5a594319a0d69dbc452e748bcf05892e

哈希类型

值

操作

MD5

6b1e5c7651c33030da74de2ff9190364

SHA1

600dbaf2a899dc812f9c1a2465b99db7d80c02aa

SHA256

4c0da3c450f93880ed7586617925dae9b13de1a8d62ebc738ff688de06ab8178

SHA512

65a19d568db26e00ef2aa05b7481094d7c64d4cdb4b673db9b45371e4c4d14919425f40181c3779d94bb9034846ed4a376901c7ac8d849d0d3971c1467cee633

ImpHash

5a594319a0d69dbc452e748bcf05892e

PE 分析

基本信息

▼

图标	哈希: 4db056e16f63a3fe2552c7e3940d6fcc 模糊: 11a63653e0f715f1b9a22b0f46cb3a3f dHash: a200b68a49158800
映像基址	`0x00400000`
入口点	`0x004b5eec`
编译时间	2021-06-03 08:09:11
校验和	0x00000000 (实际: 0x0061e5a8)
操作系统版本	6.1
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	7 库 kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
导出	3 函数
资源	18 资源
节	10 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	ZUOYO
FileDescription	ZUOYO GMK67 Driver Setup
FileVersion
LegalCopyright
OriginalFileName
ProductName	ZUOYO GMK67 Driver
ProductVersion	V1.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	734,748 bytes	735,232 bytes	6.36 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AD6E46E3A3ACDB533EB6A077F6D065AF`
`.itext`	`0x000b5000`	5,768 bytes	6,144 bytes	5.97 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D40FC822339D01F2ABCC5493AC101C94`
`.data`	`0x000b7000`	14,244 bytes	14,336 bytes	5.04 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`4C195D5591F6D61265DF08A3733DE3A2`
`.bss`	`0x000bb000`	28,136 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000c2000`	3,894 bytes	4,096 bytes	4.90 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A73D686F1E8B9BB06EC767721135E397`
`.didata`	`0x000c3000`	420 bytes	512 bytes	2.76 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`41B8CE23DD243D14BEEBC71771885C89`
`.edata`	`0x000c4000`	154 bytes	512 bytes	1.87 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`37C1A5C63717831863E018C0F51DABB7`
`.tls`	`0x000c5000`	24 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000c6000`	93 bytes	512 bytes	1.38 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8F2F090ACD9622C88A6A852E72F94E96`
`.rsrc`	`0x000c7000`	80,776 bytes	80,896 bytes	2.20 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`556720A2FDB1FB816772DFD3BED736B9`

资源分析

▼

资源总数: 18 (79,694 字节)

资源类型	数量	总大小	百分比
RT_ICON	1	67,624 字节	84.9%
RT_STRING	11	8,040 字节	10.1%
RT_RCDATA	3	768 字节	1%
RT_GROUP_ICON	1	20 字节	0%
RT_VERSION	1	1,412 字节	1.8%
RT_MANIFEST	1	1,830 字节	2.3%

证书链分析

▼

证书 Information

产品	ZUOYO GMK67 Driver
描述	ZUOYO GMK67 Driver Setup

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Zuoya GMK67 Keyboard Setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.231.174
数据库版本	2025-12-14 01:00:23 UTC

Zuoya GMK67 Keyboard Setup.exe (ZUOYO GMK67 Driver Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别