The 小梦音乐下载 exe (小梦音乐下载) File Malware Analysis

The 小梦音乐下载.exe (小梦音乐下载) File Analysis

Updated 1 month ago

Checked by Malware Check

小梦音乐下载.exe

Hash Type	Value	Action
MD5	612b35ab697afe0dfeece6bfdec04210
SHA1	8c5548e78ad8bcdbe4fae6c5ee5e2e80aaa2d1f3
SHA256	982108beceea9fec930e701b44d8f0be486e11cecd8d1c5b04b5202402a5a558
SHA512	c849ba522e804ad27dee65c301117c6b26710b943249d39c2c4abeec9c25dd0c32d4e3bbcbb292853b3929527eabcb3d58f5b3a2b6590b4e0ee26eea15a7a08c
ImpHash	109f670dc30041cb589e195464d5170a

Hash Type

Value

Action

MD5

612b35ab697afe0dfeece6bfdec04210

SHA1

8c5548e78ad8bcdbe4fae6c5ee5e2e80aaa2d1f3

SHA256

982108beceea9fec930e701b44d8f0be486e11cecd8d1c5b04b5202402a5a558

SHA512

c849ba522e804ad27dee65c301117c6b26710b943249d39c2c4abeec9c25dd0c32d4e3bbcbb292853b3929527eabcb3d58f5b3a2b6590b4e0ee26eea15a7a08c

ImpHash

109f670dc30041cb589e195464d5170a

PE Analysis

Basic Information

▼

Icon	Hash: 0763164948358c69d3f45857c9f3df6c Fuzzy: f9a9d11bc8937f6a8ebf9239f8c5f5d0 dHash: aa499a296e8727a6
Image Base	`0x00400000`
Entry Point	`0x00c6e964`
Compilation Time	2025-11-20 15:49:35
Checksum	0x00000000 (Actual: 0x020698b6)
OS Version	6.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	18 libraries
Exports	2 functions
Resources	287 Resources
Sections	12 Sections

Version Information

▼

FileDescription	小梦音乐下载
FileVersion	1.0.6.0
ProgramID	com.embarcadero.小梦音乐下载
ProductName	小梦音乐下载
ProductVersion	1.0.6.0
Translation	0x1c09 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	8,792,248 bytes	8,792,576 bytes	6.43 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`51829036781A759D362841D7D5F7B184`
`.itext`	`0x00864000`	43,588 bytes	44,032 bytes	5.76 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D1603E4814ECD5C776599BDE85D5A0DA`
`.data`	`0x0086f000`	161,564 bytes	161,792 bytes	5.92 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`34592B41DB38695A0B76DB9524A61D94`
`.bss`	`0x00897000`	38,428 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x008a1000`	23,916 bytes	24,064 bytes	5.18 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1980C245A498A099BFBD92891672A922`
`.didata`	`0x008a7000`	3,784 bytes	4,096 bytes	4.23 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E179A8EFFEEE50E4A22AE8144DA6C15E`
`.edata`	`0x008a8000`	117 bytes	512 bytes	1.44 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FDF4CF79DC645F467516911F8C3C817C`
`.tls`	`0x008a9000`	92 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x008aa000`	93 bytes	512 bytes	1.38 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`6751ED427A541CD7F523F5AB71DCA731`
`.reloc`	`0x008ab000`	581,608 bytes	581,632 bytes	6.74 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`9DA4C0A7FF6C5AF6B5EB674FBACA39F9`
`.rsrc`	`0x00939000`	1,584,640 bytes	1,584,640 bytes	5.57 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4840E039A5354D23EB7981D69507559B`
`.debug`	`0x00abc000`	22,731,359 bytes	22,731,359 bytes	5.49 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`24F630CC8D46BD9F3DDFA233D80F790E`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 287 (1,563,532 bytes)

Resource Type	Count	Total Size	Percentage
RT_CURSOR	23	7,084 bytes	0.5%
RT_BITMAP	63	89,768 bytes	5.7%
RT_ICON	1	67,624 bytes	4.3%
RT_DIALOG	2	164 bytes	0%
RT_STRING	45	38,422 bytes	2.5%
RT_RCDATA	127	1,357,687 bytes	86.8%
RT_GROUP_CURSOR	23	460 bytes	0%
RT_GROUP_ICON	1	20 bytes	0%
RT_VERSION	1	500 bytes	0%
RT_MANIFEST	1	1,803 bytes	0.1%

Certificate Chain Analysis

▼

Certificate Information

Product	小梦音乐下载
Description	小梦音乐下载
File Version	1.0.6.0

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	小梦音乐下载.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-02 15:00:35 UTC

The 小梦音乐下载.exe (小梦音乐下载) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification