污妖王们的计时器 1 2 exe Author of the program, not HTML2EXE Author 文件恶意软件分析

污妖王们的计时器 1.2.exe 文件分析

更新于 3 months ago

检查者 Malware Check

污妖王们的计时器 1.2.exe

哈希类型	值	操作
MD5	8a72b36968109e2472f7e2ef6d190594
SHA1	07ef769102eea7db660310cb9a06c0b4e1be5484
SHA256	647e0884442d724ea0a185652f46a7e76200db268456dfab293ffb98689caaad
SHA512	4243c3e16a0776d958e0646320f79cd5ed0d8f44ec30dd8eb3f4b6f15b370d297fa7e5d59e18d3126684c0181240856d7e65226847b3504ef62563ef1715de27
ImpHash	9918f3604de378122ef83e9152e2f753

哈希类型

值

操作

MD5

8a72b36968109e2472f7e2ef6d190594

SHA1

07ef769102eea7db660310cb9a06c0b4e1be5484

SHA256

647e0884442d724ea0a185652f46a7e76200db268456dfab293ffb98689caaad

SHA512

4243c3e16a0776d958e0646320f79cd5ed0d8f44ec30dd8eb3f4b6f15b370d297fa7e5d59e18d3126684c0181240856d7e65226847b3504ef62563ef1715de27

ImpHash

9918f3604de378122ef83e9152e2f753

PE 分析

基本信息

▼

图标	哈希: 6aad4e9bd6100fc0c86e8f79c95d6b24 模糊: bc54a0598d98239b1b310be3e746966e dHash: 331bb6969ab21b1f
映像基址	`0x00400000`
入口点	`0x00aa1a58`
编译时间	2025-09-20 04:19:09
校验和	0x00a4d7dc (实际: 0x00a4d7dc)
操作系统版本	6.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	22 库
导出	2 函数
资源	302 资源
节	11 节

版本信息

▼

Comments	The program is created through HTML2EXE (H5View)- no nags, no ads and fully functional
FileDescription	The program is created through HTML2EXE (H5View)
InternalName	污妖王们的计时器
ProductName	污妖王们的计时器
CompanyName	Author of the program, not HTML2EXE Author
FileVersion	1.2.0.0
ProductVersion	1.2.0.0
LegalCopyright	Author of the program, not HTML2EXE Author
OriginalFilename	HTML2EXE : http://www.abitsoft.com
LastCompiledTime	2025-09-30 00:17:47
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	6,923,508 bytes	6,923,776 bytes	6.26 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EDC9F34348BEF0158729D27EA9C90B0E`
`.itext`	`0x0069c000`	24,620 bytes	25,088 bytes	5.99 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E9A60BA0E567080A064E639FC564990F`
`.data`	`0x006a3000`	506,672 bytes	506,880 bytes	1.19 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E47C545F22D0280EEFFB071FB1115BC3`
`.bss`	`0x0071f000`	34,688 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00728000`	23,942 bytes	24,064 bytes	5.25 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`3C7D30CA4D875B5369D805C6C4FF9AAF`
`.didata`	`0x0072e000`	26,178 bytes	26,624 bytes	5.02 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0538C606CE473AA7250DC22BF09EF09B`
`.edata`	`0x00735000`	119 bytes	512 bytes	1.41 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`F7485560C2A9BFA38BEDD7B314C90B25`
`.tls`	`0x00736000`	96 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00737000`	93 bytes	512 bytes	1.39 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8C2C836808E68DF2531C930800581266`
`.reloc`	`0x00738000`	457,712 bytes	457,728 bytes	6.73 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`626CF710C87045D93BBD81CA40AEF4FA`
`.rsrc`	`0x007a8000`	2,789,567 bytes	2,789,888 bytes	7.36 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1AB08521B6AF5340B3AAAA01714F6657`

熵分析警报

2 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 302 (2,767,550 字节)

资源类型	数量	总大小	百分比
TYPELIB	1	1,728 字节	0.1%
RT_CURSOR	7	2,156 字节	0.1%
RT_BITMAP	105	82,308 字节	3%
RT_ICON	7	315,310 字节	11.4%
RT_DIALOG	2	164 字节	0%
RT_STRING	53	49,540 字节	1.8%
RT_RCDATA	116	2,313,091 字节	83.6%
RT_GROUP_CURSOR	7	140 字节	0%
RT_GROUP_ICON	2	110 字节	0%
RT_VERSION	1	1,200 字节	0%
RT_MANIFEST	1	1,803 字节	0.1%

证书链分析

▼

无数字签名

此文件未进行数字签名。

安全影响:

无法验证发布者的身份
运行此文件时安全风险增加
可能在某些系统上触发安全警告

⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	污妖王们的计时器 1.2.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.226.174
数据库版本	2025-09-30 04:00:30 UTC

污妖王们的计时器 1.2.exe 文件分析

技术分析

干净文件

扫描另一个文件

文件识别