Setup PreSonus Sphere Manager v2 0 0 exe PUP Packunwan 文件恶意软件分析: 845a03d9666086b227b9a57dc64a746d

Setup PreSonus Sphere Manager v2.0.0.exe PUP Packunwan 分析

更新于 1 month ago

检查者 Malware Check

Setup PreSonus Sphere Manager v2.0.0.exe

哈希类型	值	操作
MD5	845a03d9666086b227b9a57dc64a746d
SHA1	8aee1823062b960cb8f3e1b7fd9a080699ed36d0
SHA256	ecef8b1c9dd550b1489657395895161f17a8e8f68f33ac9547f5c03dc7efe66f
SHA512	5f15efdca8992550a1f0bf5712023fb940b9f9670b37406762a444c04c0a42454c49d3e6876ff3ccf32eb4c09b7f4b29208065d3913c8504a8ee63c2c548a4e0
ImpHash	20dd26497880c05caed9305b3c8b9109

哈希类型

值

操作

MD5

845a03d9666086b227b9a57dc64a746d

SHA1

8aee1823062b960cb8f3e1b7fd9a080699ed36d0

SHA256

ecef8b1c9dd550b1489657395895161f17a8e8f68f33ac9547f5c03dc7efe66f

SHA512

5f15efdca8992550a1f0bf5712023fb940b9f9670b37406762a444c04c0a42454c49d3e6876ff3ccf32eb4c09b7f4b29208065d3913c8504a8ee63c2c548a4e0

ImpHash

20dd26497880c05caed9305b3c8b9109

PE 分析

基本信息

▼

图标	哈希: 30adcb5c0b2e3c35eaec2c110733c9f8 模糊: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: 92e0b496a6cada72
映像基址	`0x00400000`
入口点	`0x0041181c`
编译时间	2018-06-14 13:27:46
校验和	0x00000000 (实际: 0x00546100)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 oleaut32, advapi32, user32, kernel32, comctl32
导出	0 函数
资源	17 资源
节	8 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	TEAM R2R
FileDescription	TEAM R2R PreSonus Sphere Manager Setup
FileVersion	2.0.0
LegalCopyright	TEAM R2R
ProductName	PreSonus Sphere Manager
ProductVersion	2.0.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	62,044 bytes	62,464 bytes	6.38 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0DA5D73FFBC41792FA65A09058A91476`
`.itext`	`0x00011000`	4,004 bytes	4,096 bytes	5.78 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2EB275566563C3F1D0099A0DA7345B74`
`.data`	`0x00012000`	3,212 bytes	3,584 bytes	2.30 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`73B859E23F5FD17E00C08DB2E0E73DFE`
`.bss`	`0x00013000`	22,204 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00019000`	3,588 bytes	4,096 bytes	4.60 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E9B9C0328FD9628AD4D6AB8283DCB20E`
`.tls`	`0x0001a000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0001b000`	24 bytes	512 bytes	0.20 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3DFFC444CCC131C9DCEE18DB49EE6403`
`.rsrc`	`0x0001c000`	45,568 bytes	45,568 bytes	4.14 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D8B33CDAECEC069D8241EDD83FADA2A4`

资源分析

▼

资源总数: 17 (44,126 字节)

资源类型	数量	总大小	百分比
RT_ICON	4	4,640 字节	10.5%
RT_STRING	6	2,668 字节	6%
RT_RCDATA	4	33,908 字节	76.8%
RT_GROUP_ICON	1	62 字节	0.1%
RT_VERSION	1	1,268 字节	2.9%
RT_MANIFEST	1	1,580 字节	3.6%

证书链分析

▼

无数字签名

此文件未进行数字签名。

安全影响:

无法验证发布者的身份
运行此文件时安全风险增加
可能在某些系统上触发安全警告

⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Setup PreSonus Sphere Manager v2.0.0.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.229.174
数据库版本	2025-11-11 16:00:16 UTC

Setup PreSonus Sphere Manager v2.0.0.exe PUP Packunwan 分析

技术分析

PUP.Win32.Packunwan.bot

扫描另一个文件

文件识别