Driver booster 11 0 0 21 exe (Driver Booster 11 Setup) IObit 文件恶意软件分析

Driver-booster-11-0-0-21 (1).exe (Driver Booster 11 Setup) 文件分析

更新于 1 year ago

检查者 Malaware Check

driver-booster-11-0-0-21 (1).exe

哈希类型	值	操作
MD5	176d5e834d6e8588b77b4f9f039297e8
SHA1	ede5a8e6ea191eb41f38b7c3609a8b9e3d71c3f3
SHA256	a146cf8b84d5e38a583fa9a69b922d2b6c78f55a995a0447b34a88c6f2449af3
SHA512	1a6d2e44ec18e701370e62fb70096ada429bb89897ef93d611c7b550517d2285079f6b9dd0969ff445d23a1fa63ffb1c3b3777e0a1e11e86acd5d8cd8d90e57c
ImpHash	20dd26497880c05caed9305b3c8b9109

哈希类型

值

操作

MD5

176d5e834d6e8588b77b4f9f039297e8

SHA1

ede5a8e6ea191eb41f38b7c3609a8b9e3d71c3f3

SHA256

a146cf8b84d5e38a583fa9a69b922d2b6c78f55a995a0447b34a88c6f2449af3

SHA512

1a6d2e44ec18e701370e62fb70096ada429bb89897ef93d611c7b550517d2285079f6b9dd0969ff445d23a1fa63ffb1c3b3777e0a1e11e86acd5d8cd8d90e57c

ImpHash

20dd26497880c05caed9305b3c8b9109

PE 分析

基本信息

▼

图标	哈希: 76ecc7f8817b55e80a787389d612ec51 模糊: afa19386137efc057bb15478cdadf35e dHash: 80b4ec80b0b4b4e4
映像基址	`0x00400000`
入口点	`0x004117dc`
编译时间	2016-04-06 14:39:04
校验和	0x01d1df7b (实际: 0x01d1df7b)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	OK
导入	5 库 oleaut32, advapi32, user32, kernel32, comctl32
导出	0 函数
资源	19 资源
节	8 节

数字签名

▼

Sectigo RSA Code Signing CA	IObit CO., LTD (CN)
AAA Certificate Services	The USERTRUST Network (US)
DigiCert Assured ID Root CA	DigiCert Inc (US)
USERTrust RSA Certification Authority	Sectigo Limited (GB)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA	DigiCert, Inc. (US)

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	IObit
FileDescription	Driver Booster 11 Setup
FileVersion	11.0.0.21
LegalCopyright	© IObit. All rights reserved.
ProductName	Driver Booster 11
ProductVersion	11.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	62,020 bytes	62,464 bytes	6.38 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A33E9FF7181115027D121CD377C28C8F`
`.itext`	`0x00011000`	3,940 bytes	4,096 bytes	5.73 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CAEC456C18277B579A94C9508DAF36EC`
`.data`	`0x00012000`	3,208 bytes	3,584 bytes	2.30 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`746954890499546D73DCE0E994642192`
`.bss`	`0x00013000`	22,204 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00019000`	3,588 bytes	4,096 bytes	4.60 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E9B9C0328FD9628AD4D6AB8283DCB20E`
`.tls`	`0x0001a000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0001b000`	24 bytes	512 bytes	0.20 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3DFFC444CCC131C9DCEE18DB49EE6403`
`.rsrc`	`0x0001c000`	63,048 bytes	63,488 bytes	5.24 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`482929A7F4D1BC07C3B579BD5CD97157`

资源分析

▼

资源总数: 19 (61,898 字节)

资源类型	数量	总大小	百分比
RT_ICON	6	22,384 字节	36.2%
RT_STRING	6	2,668 字节	4.3%
RT_RCDATA	4	33,908 字节	54.8%
RT_GROUP_ICON	1	90 字节	0.1%
RT_VERSION	1	1,268 字节	2%
RT_MANIFEST	1	1,580 字节	2.6%

证书链分析

▼

证书 #1

主题	IObit CO., LTD IObit CO., LTD CN
颁发者	Sectigo RSA Code Signing CA
序列号	`185603548379449722777536812883569582722`

证书 #2

主题	USERTrust RSA Certification Authority The USERTRUST Network US
颁发者	AAA Certificate Services
序列号	`76359301477803385872276235234032301461`

证书 #3

主题	DigiCert Trusted Root G4 DigiCert Inc US
颁发者	DigiCert Assured ID Root CA
序列号	`19414496059604725969669510860671817818`

证书 #4

主题	Sectigo RSA Code Signing CA Sectigo Limited GB
颁发者	USERTrust RSA Certification Authority
序列号	`39390228139828865494873669055555031914`

证书 #5

主题	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US
颁发者	DigiCert Trusted Root G4
序列号	`9586110043380832440035821245782711899`

证书 #6

主题	DigiCert Timestamp 2023 DigiCert, Inc. US
颁发者	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
序列号	`7002784885422699301467740558332354838`

证书验证状态

发表评论

文件名	driver-booster-11-0-0-21 (1).exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.153.174
数据库版本	2024-01-02 02:01:52 UTC