L7Air Gaming Mouse v1 0 0 4 2024 03 13 setup exe (Machenike L7 Air Gaming Mouse Setup) Machenike 文件恶意软件分析

L7Air_Gaming_Mouse_v1.0.0.4_2024.03.13_setup.exe (Machenike L7 Air Gaming Mouse Setup) 文件分析

更新于 1 month ago

检查者 Malaware Check

L7Air_Gaming_Mouse_v1.0.0.4_2024.03.13_setup.exe

哈希类型	值	操作
MD5	f3ae0a9361133978dc65ba66d5a4f1f3
SHA1	5615d77b75029fc5da9821f00132b382ba78e1d7
SHA256	c9df1caa51ac933191aaf3689b71f1016ceef7184d76ba689133c9ea96e6bd7c
SHA512	97dda0c589aca3c9a015da3bad385ed1f15dbf2d55fb38bc0f0ab82d6f12fa8eaeb78c06dbb5e0db382d7f66acba61ff6e62b3d1fe032004177c17b3619729d2
ImpHash	e569e6f445d32ba23766ad67d1e3787f

哈希类型

值

操作

MD5

f3ae0a9361133978dc65ba66d5a4f1f3

SHA1

5615d77b75029fc5da9821f00132b382ba78e1d7

SHA256

c9df1caa51ac933191aaf3689b71f1016ceef7184d76ba689133c9ea96e6bd7c

SHA512

97dda0c589aca3c9a015da3bad385ed1f15dbf2d55fb38bc0f0ab82d6f12fa8eaeb78c06dbb5e0db382d7f66acba61ff6e62b3d1fe032004177c17b3619729d2

ImpHash

e569e6f445d32ba23766ad67d1e3787f

PE 分析

基本信息

▼

图标	哈希: b9be9d03f994552372e5b23a5b2b5d6d 模糊: aa6a1d5b512539e940f82b60f2d426c9 dHash: f0cc69b2c8e871b2
映像基址	`0x00400000`
入口点	`0x004b5eec`
编译时间	2022-04-14 16:10:23
校验和	0x000ce8c6 (实际: 0x00616642)
操作系统版本	6.1
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	7 库 kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
导出	3 函数
资源	18 资源
节	10 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	Machenike
FileDescription	Machenike L7 Air Gaming Mouse Setup
FileVersion
LegalCopyright
OriginalFileName
ProductName	Machenike L7 Air Gaming Mouse
ProductVersion	1.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	735,716 bytes	735,744 bytes	6.36 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`43AF0A9476CA224D8E8461F1E22C94DA`
`.itext`	`0x000b5000`	5,768 bytes	6,144 bytes	5.97 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`185E04B9A1F554E31F7F848515DC890C`
`.data`	`0x000b7000`	14,244 bytes	14,336 bytes	5.05 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CAB2107C933B696AA5CF0CC6C3FD3980`
`.bss`	`0x000bb000`	28,136 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000c2000`	4,060 bytes	4,096 bytes	5.03 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E7D1635E2624B124CFDCE6C360AC21CD`
`.didata`	`0x000c3000`	420 bytes	512 bytes	2.75 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8CED971D8A7705C98B173E255D8C9AA7`
`.edata`	`0x000c4000`	154 bytes	512 bytes	1.88 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D4E1E508031AFE235BF121C80FD7D5F`
`.tls`	`0x000c5000`	24 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000c6000`	93 bytes	512 bytes	1.38 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8F2F090ACD9622C88A6A852E72F94E96`
`.rsrc`	`0x000c7000`	80,848 bytes	80,896 bytes	2.99 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D8F7B14DB4051AF86990766C9E063E5`

资源分析

▼

资源总数: 18 (79,768 字节)

资源类型	数量	总大小	百分比
RT_ICON	1	67,624 字节	84.8%
RT_STRING	11	8,040 字节	10.1%
RT_RCDATA	3	768 字节	1%
RT_GROUP_ICON	1	20 字节	0%
RT_VERSION	1	1,412 字节	1.8%
RT_MANIFEST	1	1,904 字节	2.4%

证书链分析

▼

证书 Information

产品	Machenike L7 Air Gaming Mouse
描述	Machenike L7 Air Gaming Mouse Setup

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	L7Air_Gaming_Mouse_v1.0.0.4_2024.03.13_setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.215.174
数据库版本	2025-04-24 21:00:20 UTC

L7Air_Gaming_Mouse_v1.0.0.4_2024.03.13_setup.exe (Machenike L7 Air Gaming Mouse Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别