Onaylanmamış 947718 crdownload (GTA TR Universal Türkçe Yama) GTA TR 文件恶意软件分析

Onaylanmamış 947718.crdownload (GTA TR Universal Türkçe Yama) 文件分析

更新于 3 months ago

检查者 Malware Check

Onaylanmamış 947718.crdownload

哈希类型	值	操作
MD5	f13c095148e73c637a65ada3f99d8c84
SHA1	7d4ed886d9b605e6cd0beff618b992bfee328256
SHA256	614a288e317586acdf8291bc5376a7d384d84853d52e8c2f62d58d20b626dc77
SHA512	fcc79e120bd402ecc0448317b10f9980097fa4e80f8fb3e6945bd1f65d89b59a9ca32dac044bfb456e1590b6ff02e1484a1a635c7af57d4ab8aa58ac5904e837
ImpHash	efd455830ba918de67076b7c65d86586

哈希类型

值

操作

MD5

f13c095148e73c637a65ada3f99d8c84

SHA1

7d4ed886d9b605e6cd0beff618b992bfee328256

SHA256

614a288e317586acdf8291bc5376a7d384d84853d52e8c2f62d58d20b626dc77

SHA512

fcc79e120bd402ecc0448317b10f9980097fa4e80f8fb3e6945bd1f65d89b59a9ca32dac044bfb456e1590b6ff02e1484a1a635c7af57d4ab8aa58ac5904e837

ImpHash

efd455830ba918de67076b7c65d86586

PE 分析

基本信息

▼

图标	哈希: 6d3f1364c4eb3a479b1b816ada6cc2eb 模糊: 5bb1f19dd90419b3eab08890e8cf2d6f dHash: 72d0f8a4cac37a18
映像基址	`0x00400000`
入口点	`0x004acfe0`
编译时间	2025-05-03 14:45:36
校验和	0x00000000 (实际: 0x011b68a1)
操作系统版本	6.1
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 kernel32, comctl32, user32, oleaut32, advapi32
导出	2 函数
资源	23 资源
节	11 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	GTA TR
FileDescription	GTA TR Universal Türkçe Yama
FileVersion
LegalCopyright	GTA TR
OriginalFileName
ProductName	GTA TR Universal Türkçe Yama
ProductVersion	1.03
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	698,084 bytes	698,368 bytes	6.39 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B8445BDD9E5484C726072A6120DAC5D3`
`.itext`	`0x000ac000`	6,024 bytes	6,144 bytes	6.25 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5F4B1E9E79C8B34D6A04F97D624934E2`
`.data`	`0x000ae000`	15,356 bytes	15,360 bytes	4.96 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`5C86C8844D87A63141D9256AB8648C6D`
`.bss`	`0x000b2000`	29,348 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000ba000`	4,198 bytes	4,608 bytes	4.82 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CFABBE97F496978BE1D9ED2B0E76508C`
`.didata`	`0x000bc000`	420 bytes	512 bytes	2.76 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`6B25D6A3BA6793DF88CEEC45D9ED59B3`
`.edata`	`0x000bd000`	113 bytes	512 bytes	1.33 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1F044B007F9A7C5E77E0A9392C1C3BCB`
`.tls`	`0x000be000`	24 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000bf000`	93 bytes	512 bytes	1.40 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`48BDF6E6093F9760E6F540D2B96A5683`
`.reloc`	`0x000c0000`	70,408 bytes	70,656 bytes	6.71 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`94B970C14A85684DE6C6A4DFAA0A363B`
`.rsrc`	`0x000d2000`	95,372 bytes	95,744 bytes	7.34 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B18E1E61BF57518F1C8A8D44F0D718FB`

熵分析警报

2 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 23 (94,050 字节)

资源类型	数量	总大小	百分比
RT_ICON	5	80,954 字节	86.1%
RT_STRING	12	8,692 字节	9.2%
RT_RCDATA	3	956 字节	1%
RT_GROUP_ICON	1	76 字节	0.1%
RT_VERSION	1	1,412 字节	1.5%
RT_MANIFEST	1	1,960 字节	2.1%

证书链分析

▼

证书 Information

产品	GTA TR Universal Türkçe Yama
描述	GTA TR Universal Türkçe Yama
版权	GTA TR

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Onaylanmamış 947718.crdownload
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.226.174
数据库版本	2025-09-26 15:00:27 UTC

Onaylanmamış 947718.crdownload (GTA TR Universal Türkçe Yama) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别