Hitpaw voice changer exe (HitPaw Voice Changer) HitPaw Co , Ltd 文件恶意软件分析

Hitpaw-voice-changer.exe (HitPaw Voice Changer) 文件分析

更新于 1 year ago

检查者 Malware Check

hitpaw-voice-changer.exe

哈希类型	值	操作
MD5	05f2edb8621e49275e0029c6754b942d
SHA1	f0ae6cafded1bf60c70e5050f6d2a6ad1b13d8a8
SHA256	90279b02d3afb48d50d70201ae740daa2761d0d3f06fd60c4db8690d9ba586fe
SHA512	d671c29d44edf247b6bead6f5a9c61fa76adb4839d8506a5b6a1faf72b97a085af13811c21555e3a08a8d9bcc3a8acc4b228cba3eedf9a2ff93fc28763e46ec9
ImpHash	fe5fb373dbec3ba73ffb51335d1fc086

哈希类型

值

操作

MD5

05f2edb8621e49275e0029c6754b942d

SHA1

f0ae6cafded1bf60c70e5050f6d2a6ad1b13d8a8

SHA256

90279b02d3afb48d50d70201ae740daa2761d0d3f06fd60c4db8690d9ba586fe

SHA512

d671c29d44edf247b6bead6f5a9c61fa76adb4839d8506a5b6a1faf72b97a085af13811c21555e3a08a8d9bcc3a8acc4b228cba3eedf9a2ff93fc28763e46ec9

ImpHash

fe5fb373dbec3ba73ffb51335d1fc086

PE 分析

基本信息

▼

图标	哈希: 4e59441deff0e378f937f41833f750a9 模糊: 354bd41897e8609c68c90e8dd7a9d419 dHash: b2697971693171e8
映像基址	`0x00400000`
入口点	`0x00897130`
编译时间	2023-07-11 08:06:20
校验和	0x002d3210 (实际: 0x002d3210)
操作系统版本	5.1
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed`
数字签名	OK
导入	20 库
导出	0 函数
资源	19 资源
节	3 节

数字签名

▼

DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA	DigiCert (US)
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1	HITPAW CO., LIMITED (HK)

版本信息

▼

CompanyName	HitPaw Co., Ltd.
FileDescription	HitPaw Voice Changer
FileVersion	2.7.11.0
LegalCopyright	Copyright © 2007-2023 HitPaw Co.,Ltd.
ProductName	20230711160553
ProductVersion	2.7.11.0
Translation	0x0409 0x04e4

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`UPX0`	`0x00001000`	2,789,376 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`UPX1`	`0x002aa000`	2,023,424 bytes	2,020,352 bytes	7.90 (打包/加密)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`819BE5235291D76866C240C49EDE935B`
`.rsrc`	`0x00498000`	868,352 bytes	865,280 bytes	7.78 (打包/加密)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2BA0E1D5349D40BB3B583B96BB8D20B1`

熵分析警报

2 检测到高熵（≥7.5）的节 - 可能存在打包/加密

资源分析

▼

资源总数: 19 (1,675,079 字节)

资源类型	数量	总大小	百分比
ZIPRES	1	812,116 字节	48.5%
RT_ICON	15	861,440 字节	51.4%
RT_GROUP_ICON	1	216 字节	0%
RT_VERSION	1	656 字节	0%
RT_MANIFEST	1	651 字节	0%

证书链分析

▼

证书 #1

主题	DigiCert Trusted Root G4 DigiCert Inc US
颁发者	DigiCert Assured ID Root CA
序列号	`19414496059604725969669510860671817818`

证书 #2

主题	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US
颁发者	DigiCert Trusted Root G4
序列号	`9586110043380832440035821245782711899`

证书 #3

主题	DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 DigiCert, Inc. US
颁发者	DigiCert Trusted Root G4
序列号	`11533403529598586876501374841704918745`

证书 #4

主题	DigiCert Timestamp 2022 - 2 DigiCert US
颁发者	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
序列号	`16352681515936560713148055516499426650`

证书 #5

主题	HITPAW CO., LIMITED HITPAW CO., LIMITED HK
颁发者	DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
序列号	`3905744507732146891459445244804998775`

证书验证状态

发表评论

文件名	hitpaw-voice-changer.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
扫描器版本	1.0.150.174
数据库版本	2023-12-07 10:01:37 UTC