The 买入预警 exe File Malware Analysis

The 买入预警.exe File Analysis

Updated 1 month ago

Checked by Malaware Check

买入预警.exe

Hash Type	Value	Action
MD5	2453564956a68967ee5355ed22bd69be
SHA1	5c16cd3cf3880ad0626133fa55ce30d6c6617f19
SHA256	e3a41107b3340e7129805cebb99d8f59c8a9856c87c1865fd07075ae2ff88932
SHA512	99388a00e8d8bd93fedf4c55b5cc51981fa1bcc06c1f53eeb54c4aece7b13d84ebe942d714d4d53d77de0e3bd61c3a215fb1a76c0eff67e2bb603ba92b46ddee
ImpHash	0ed6d55fa568d1ac78f1cd3b537274be

Hash Type

Value

Action

MD5

2453564956a68967ee5355ed22bd69be

SHA1

5c16cd3cf3880ad0626133fa55ce30d6c6617f19

SHA256

e3a41107b3340e7129805cebb99d8f59c8a9856c87c1865fd07075ae2ff88932

SHA512

99388a00e8d8bd93fedf4c55b5cc51981fa1bcc06c1f53eeb54c4aece7b13d84ebe942d714d4d53d77de0e3bd61c3a215fb1a76c0eff67e2bb603ba92b46ddee

ImpHash

0ed6d55fa568d1ac78f1cd3b537274be

PE Analysis

Basic Information

▼

Icon	Hash: 7fb4f661ba15069bec2f5c0bb20fbf5f Fuzzy: 4da92b189b6ef88487cd9bf1cc645dc6 dHash: d4e8e0e0dc8cc8a0
Image Base	`0x00400000`
Entry Point	`0x00401600`
Compilation Time	2025-04-11 13:52:11
Checksum	0x0001a9a1 (Actual: 0x0001a9a1)
OS Version	4.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	1 libraries MSVBVM60
Exports	0 functions
Resources	4 Resources
Sections	3 Sections

Version Information

▼

Translation	0x0804 0x04b0
ProductName	工程1
FileVersion	1.00
ProductVersion	1.00
InternalName	买入预警
OriginalFilename	买入预警.exe

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	27,356 bytes	28,672 bytes	5.45 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`3FEE282DD517776156E57FE810C2665C`
`.data`	`0x00008000`	3,868 bytes	4,096 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`620F0B67A91F7F74151BC5BE745B7110`
`.rsrc`	`0x00009000`	4,380 bytes	8,192 bytes	2.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`58FC5133944F4FF0220DD60E985C76E4`

Resource Analysis

▼

Total Resources: 4 (4,092 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	2	3,600 bytes	88%
RT_GROUP_ICON	1	36 bytes	0.9%
RT_VERSION	1	456 bytes	11.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

File Name	买入预警.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.213.174
Database Version	2025-04-12 05:00:21 UTC

The 买入预警.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification