| 文件名 | cuenta para pago.exe |
| 文件类型 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 扫描器版本 | 1.0.168.174 |
| 数据库版本 | 2024-03-11 15:00:34 UTC |
恶意软件家族: GuLoader
| 哈希类型 | 值 | 操作 |
|---|---|---|
| MD5 |
e49773c89d735bf9e427e4108dce8a0e
|
|
| SHA1 |
fbca00f3b541bc57ca9308a291184a1d38f59da0
|
|
| SHA256 |
5b0b733c5af1d0a28a8a117ec03f46d16b3a4e3b1b45a5eae3d15e09dff92b3a
|
|
| SHA512 |
4f24777d0156d3b09555a41e8bbebcb4b32c0686e2c856c2169e9a74be7e779f281b9ac00a02f2a91faf99c5dd26134e1b05bcf386ac08ad0b59786f496d3e24
|
|
| ImpHash |
003a54a0fe3c2a4dbf64143004ff22d3
|
| 图标 |
哈希: 298cb459317913eaef4e92d9ff7879e3
模糊: e2f768a649fa77661d4a2284897636df dHash: 66e2c1d4cc84f879 |
| 映像基址 | 0x00400000 |
| 入口点 | 0x00403804 |
| 编译时间 | 2023-09-03 10:13:56 |
| 校验和 | 0x000d03da (实际: 0x000d03da) |
| 操作系统版本 | 5.1 |
| PEiD 签名 |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| 数字签名 | An error occurred while validating the countersignature: Chain verification from C=US, O=Apple Inc., CN=Timestamp Signer MA2 (serial:4692336002913687704, sha1:b657227dacbe1c291cd399072e849439c979acba) failed: Unable to build a validation path for the certificate "Common Name: Timestamp Signer MA2, Organization: Apple Inc., Country: US" - no issuer matching "Common Name: Apple Root CA, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US" was found |
| 导入 |
7 库
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32 |
| 导出 | 0 函数 |
| 资源 | 23 资源 |
| 节 | 5 节 |
| Comments | afslaaende |
| CompanyName | sphaerella satorii |
| LegalCopyright | analyserammerne sandspit |
| LegalTrademarks | geochronic cyclostyle pharyngoplegia |
| ProductName | omkrslerne gennemsyringen polyphonic |
| Translation | 0x0409 0x04b0 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | 熵 | 特征 | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
28,137 bytes | 28,160 bytes | 6.40 (正常) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
AAF6BA82E44448945074817364F7C501 |
.rdata |
0x00008000 |
6,260 bytes | 6,656 bytes | 4.85 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
826E848BE7A58863DD1824849463913C |
.data |
0x0000a000 |
128,576 bytes | 512 bytes | 1.76 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
67BA542070452BC214657AF4C9359B98 |
.ndata |
0x0002a000 |
434,176 bytes | 0 bytes | 0.00 (正常) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00094000 |
177,800 bytes | 178,176 bytes | 5.04 (正常) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
F98DDE5C86EFA1909DD0BF9DB74FF0BF |
| 资源类型 | 数量 | 总大小 | 百分比 |
|---|---|---|---|
| RT_ICON | 16 | 173,984 字节 | |
| RT_DIALOG | 4 | 832 字节 | |
| RT_GROUP_ICON | 1 | 230 字节 | |
| RT_VERSION | 1 | 652 字节 | |
| RT_MANIFEST | 1 | 841 字节 |
此文件未进行数字签名。
⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。
An error occurred while validating the countersignature: Chain verification from C=US, O=Apple Inc., CN=Timestamp Signer MA2 (serial:4692336002913687704, sha1:b657227dacbe1c291cd399072e849439c979acba) failed: Unable to build a validation path for the certificate "Common Name: Timestamp Signer MA2, Organization: Apple Inc., Country: US" - no issuer matching "Common Name: Apple Root CA, Organizational Unit: Apple Certification Authority, Organization: Apple Inc., Country: US" was found
建议: 验证文件来源并确保它来自可信的发布者.
按照以下步骤完全从系统中移除威胁
