| 在线病毒检测器 | v.1.0.181.174 |
| 数据库版本: | 2024-07-06 18:00:25 |
打包是恶意软件作者常用的策略，用于使其恶意代码更难以分析和被防病毒和安全程序检测到。这些技术包括对恶意软件的代码进行压缩、加密或以其他方式修改，以使其看起来不同于其原始形式。其目标是隐藏恶意软件的真正性质，以逃避安全工具的检测。
| File | dupe_client3.1crack (1).exe |
| 已检查 | 2024-07-06 15:19:18 |
| MD5 | 996ed1a0f71cfcdca51fe83d9090187e |
| SHA1 | ad6068708aca9ffbe673d01dbc53d0ac2248e848 |
| SHA256 | 5d1a929c7fb650ff0a459525a8eadb15aa650d154ba373d24b5138387e2bcc83 |
| SHA512 | 4f7cbca3c7f372187b486afefa754f96edec1637f5ea7a3db90af122e049e7c1bfbe87cd38e235bb0b3b359c2a93c993a107a1bad154f26fc4de0f52d4516899 |
| Imphash | b1c5b1beabd90d9fdabd1df0779ea832 |
| File Size | 17795418 bytes |
Gridinsoft能够识别并消除Trojan.Win32.Packed.sa，无需进一步的用户干预。
 |
8d9da329386d64d6b86a12bd2f986399 9043363bfee17e0d508057b9ae7189e9 84b4b4d4c4ccccc0 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x140032ee0 |
| Compilation: | 2024-05-12 10:17:07 |
| Checksum: | 0x00000000 (Actual: 0x01106f61) |
| OS Version: | 5.2 |
| PDB Path: | D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb |
| PEiD: | PE32+ executable (GUI) x86-64, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 8 |
| Imports: | KERNEL32, OLEAUT32, gdiplus, |
| Exports: | 0 |
| Resources: | 28 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0004676e | 0x00046800 | f06bb06e02377ae8b223122e53be35c2 | 6.47 |
| .rdata | 0x00048000 | 0x000128c4 | 0x00012a00 | 2de06d4a6920a6911e64ff20000ea72f | 5.27 |
| .data | 0x0005b000 | 0x0000e75c | 0x00001a00 | 0dbdb901a7d477980097e42e511a94fb | 3.26 |
| .pdata | 0x0006a000 | 0x0000306c | 0x00003200 | b0ce0f057741ad2a4ef4717079fa34e9 | 5.50 |
| .didat | 0x0006e000 | 0x00000360 | 0x00000400 | 1fcc7b1d7a02443319f8fcc2be4ca936 | 3.05 |
| _RDATA | 0x0006f000 | 0x0000015c | 0x00000200 | 3f331ec50f09ba861beaf955b33712d5 | 3.34 |
| .rsrc | 0x00070000 | 0x0000e3bc | 0x0000e400 | 1b279dad3e3d77fcdfb269a130bf474b | 6.78 |
| .reloc | 0x0007f000 | 0x00000970 | 0x00000a00 | 77a9ddfc47a5650d6eebbcc823e39532 | 5.34 |
