Toon Boom Harmony 21 1 Premium Search&Patch Activation exe (Toonboom Harmony 21 1 Premium) countryboy 文件恶意软件分析

Toon_Boom_Harmony_21-1_Premium_Search&Patch_Activation.exe (Toonboom Harmony 21.1 Premium) 文件分析

更新于 8 months ago

检查者 Malware Check

Toon_Boom_Harmony_21-1_Premium_Search&Patch_Activation.exe

哈希类型	值	操作
MD5	1d2d873842cb6d739aaa027b1d2883a5
SHA1	1de534df04a0e9d320ae73682f9bf46d717376b0
SHA256	f3827e1f9471c6a21909d81f1d75831de6b800dbd873021f6e71c36a7e10686b
SHA512	ec1ba402ce0569f3bdf2c072ba41c1dab852f4c78c67332b734a43c99bccc2e2215733ae34e6581a6fc0f26d677ec99ccb47ef82f79d9c894dd44a25a0c622fb
ImpHash	2fb819a19fe4dee5c03e8c6a79342f79

哈希类型

值

操作

MD5

1d2d873842cb6d739aaa027b1d2883a5

SHA1

1de534df04a0e9d320ae73682f9bf46d717376b0

SHA256

f3827e1f9471c6a21909d81f1d75831de6b800dbd873021f6e71c36a7e10686b

SHA512

ec1ba402ce0569f3bdf2c072ba41c1dab852f4c78c67332b734a43c99bccc2e2215733ae34e6581a6fc0f26d677ec99ccb47ef82f79d9c894dd44a25a0c622fb

ImpHash

2fb819a19fe4dee5c03e8c6a79342f79

PE 分析

基本信息

▼

图标	哈希: 12c758d5107ee0f633921f1c3009fa7b 模糊: bc53aec7bcb72ddc777baae79217ac8b dHash: 98d272322062c8c9
映像基址	`0x00400000`
入口点	`0x0040aad0`
编译时间	1992-06-19 22:22:17
校验和	0x00000000 (实际: 0x006ba5cf)
操作系统版本	1.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 kernel32, user32, oleaut32, advapi32, comctl32
导出	0 函数
资源	11 资源
节	8 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	countryboy
FileDescription	Toonboom Harmony 21.1 Premium
FileVersion	21.1.0
LegalCopyright	Copyright (c) countryboy
ProductName	Toonboom Harmony 21.1 Premium Activation
ProductVersion	21.1.0.18394
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`CODE`	`0x00001000`	41,480 bytes	41,984 bytes	6.60 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`49513E676DADFB3919C4B137DD7C6D66`
`DATA`	`0x0000c000`	592 bytes	1,024 bytes	2.77 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0A7B48E75F6B6EF4A087528FEE0D185C`
`BSS`	`0x0000d000`	3,732 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0000e000`	2,428 bytes	2,560 bytes	4.49 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`DF5F31E62E05C787FD29EED7071BF556`
`.tls`	`0x0000f000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00010000`	24 bytes	512 bytes	0.19 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`14DFA4128117E7F94FE2F8D7DEA374A0`
`.reloc`	`0x00011000`	2,336 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x00012000`	64,156 bytes	64,512 bytes	3.58 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`858F6EE64230ECC77F2D377919D28C7E`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 11 (63,442 字节)

资源类型	数量	总大小	百分比
RT_ICON	1	57,820 字节	91.1%
RT_STRING	6	2,710 字节	4.3%
RT_RCDATA	1	44 字节	0.1%
RT_GROUP_ICON	1	20 字节	0%
RT_VERSION	1	1,268 字节	2%
RT_MANIFEST	1	1,580 字节	2.5%

证书链分析

▼

证书 Information

产品	Toonboom Harmony 21.1 Premium Activation
描述	Toonboom Harmony 21.1 Premium
文件版本	21.1.0
版权	Copyright (c) countryboy

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Toon_Boom_Harmony_21-1_Premium_Search&Patch_Activation.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.195.174
数据库版本	2024-11-07 08:00:27 UTC

Toon_Boom_Harmony_21-1_Premium_Search&Patch_Activation.exe (Toonboom Harmony 21.1 Premium) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别