Der shinobi handjob exe (Adobe Flash Player 11 2 r202) Adobe Systems, Inc Malware Analyse

Der shinobi_handjob.exe (Adobe Flash Player 11.2 r202) Scan-Bericht

Aktualisiert 1 month ago

Geprüft von Malware Check

shinobi_handjob.exe

Hash-Typ	Wert	Aktion
MD5	7499e9eab36d764d708495b0509f6c8e
SHA1	815ece3c4ed2c556b83881adf785e00b69f61e94
SHA256	a323446b97fa6cb4b84af34bbe4b714e50f808730632319305ff11aea80f08c9
SHA512	148235fafdd60a66172ad0e37cbff27af6012ccf8d38c35a272bd21700ffa1194baa35beff4c773ecf5d503f6e450e3741175fbd51996675847ea65832562ddf
ImpHash	d120a12a19523bf42b05cb9315741008

Hash-Typ

Wert

Aktion

MD5

7499e9eab36d764d708495b0509f6c8e

SHA1

815ece3c4ed2c556b83881adf785e00b69f61e94

SHA256

a323446b97fa6cb4b84af34bbe4b714e50f808730632319305ff11aea80f08c9

SHA512

148235fafdd60a66172ad0e37cbff27af6012ccf8d38c35a272bd21700ffa1194baa35beff4c773ecf5d503f6e450e3741175fbd51996675847ea65832562ddf

ImpHash

d120a12a19523bf42b05cb9315741008

▼

Symbol	Hash: 9f1dc995ae84870e2ae5e3f70235cd16 Unscharf: c1bf1bac58209617000d9df245eb7081 dHash: b2cae664f298e816
Bildbasis	`0x00400000`
Einstiegspunkt	`0x009629eb`
Kompilierungszeit	2012-03-15 23:13:02
Prüfsumme	0x007c0569 (Tatsächlich: 0x0083a7f8)
OS-Version	5.0
PEiD-Signaturen	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB-Pfad	`FlashPlayer.pdb`
Digitale Signatur	The expected hash does not match the digest in SpcInfo
Importe	16 Bibliotheken
Exporte	1 Funktionen
Ressourcen	218 Ressourcen
Abschnitte	7 Abschnitte

▼

CompanyName	Adobe Systems, Inc.
FileDescription	Adobe Flash Player 11.2 r202
FileVersion	11,2,202,228
InternalName	Adobe Flash Player 11.2
LegalCopyright	Adobe® Flash® Player. Copyright © 1996-2012 Adobe Systems Incorporated. All Rights Reserved. Adobe and Flash are either trademarks or registered trademarks in the United States and/or other countries.
LegalTrademarks	Adobe Flash Player
OriginalFilename	SAFlashPlayer.exe
ProductName	Shockwave Flash
ProductVersion	11,2,202,228
Debugger	0
Translation	0x0409 0x04b0

▼

Name	Virtuelle Adresse	Virtuelle Größe	Rohgröße	Entropie	Eigenschaften	MD5
`.text`	`0x00001000`	6,136,485 bytes	6,136,832 bytes	6.82 (Komprimiert)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`41CF9856836CB2BDC1C1C1E43F27BBCE`
`.rodata`	`0x005dc000`	4,320 bytes	4,608 bytes	4.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F9B675A1BD0FBF9EB19F171F153BF909`
`.rdata`	`0x005de000`	1,151,655 bytes	1,152,000 bytes	6.69 (Komprimiert)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EFD0A5858CE94B78FE0C928C2C919423`
`.data`	`0x006f8000`	1,129,512 bytes	223,744 bytes	5.68 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B517DAB9B0E998A27C415E2EB4ECC4CF`
`.rodata`	`0x0080c000`	1,184 bytes	1,536 bytes	4.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`434F064A79169B10BCE9F9048ECACDFC`
`.rsrc`	`0x0080d000`	299,360 bytes	299,520 bytes	6.26 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`33411469AD6B7751DC1703C5B890ECE0`
`.reloc`	`0x00857000`	264,730 bytes	265,216 bytes	5.53 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`0F1CEE161E4B0A7C984644B07D833525`

2 Abschnitt(e) mit erhöhter Entropie (≥6.5) - mögliche Komprimierung

▼

Gesamtressourcen: 218 (291,683 Bytes)

Ressourcentyp	Anzahl	Gesamtgröße	Prozentsatz
RT_CURSOR	5	1,284 Bytes	0.4%
RT_ICON	40	226,269 Bytes	77.6%
RT_MENU	64	24,060 Bytes	8.2%
RT_DIALOG	33	14,638 Bytes	5%
RT_STRING	64	22,878 Bytes	7.8%
RT_ACCELERATOR	1	112 Bytes	0%
RT_GROUP_CURSOR	3	88 Bytes	0%
RT_GROUP_ICON	6	596 Bytes	0.2%
RT_VERSION	1	1,284 Bytes	0.4%
RT_MANIFEST	1	474 Bytes	0.2%

▼

Produkt	Shockwave Flash
Beschreibung	Adobe Flash Player 11.2 r202
Dateiversion	11,2,202,228
Originalname	SAFlashPlayer.exe
Interner Name	Adobe Flash Player 11.2
Copyright	Adobe® Flash® Player. Copyright © 1996-2012 Adobe Systems Incorporated. All Rights Reserved. Adobe and Flash are either trademarks or registered trademarks in the United States and/or other countries.