Rapport d'analyse du fichier crypted exe

Analyse technique

Nom du fichier	crypted.exe
Type de fichier	PE32+ executable (GUI) x86-64, for MS Windows
Version du scanner	1.0.220.174
Version de la base de données	2025-07-11 23:00:16 UTC

Scanner un autre fichier

Identification du fichier

Type de hachage	Valeur	Action
MD5	0c65473026e683a5d5350a013c4a7256
SHA1	e06ed98144fc5844f40a854c8769acb8f76cdee4
SHA256	4536204f6d7acab3f6ba19769bd80786aa8e8a4ddd4f77e5220d12b0173300f0
SHA512	bf03fc4fd58e18949fc69cec55eaca6b51b13b381948289d88047d18a88cb4b8cf522ac3cc459df2af0a8cbeb5be9353ff57a0af1b82f0d300c51e60c5bf041e
ImpHash	ab6d58818d00ea8cb4793ce4f921d8d6

Analyse PE

Informations de base

▼

Base d'image	`0x140000000`
Point d'entrée	`0x14000132b`
Heure de compilation	1970-01-01 00:00:00
Somme de contrôle	0x000b419d (Réel: 0x000b419d)
Version OS	4.0
Signatures PEiD	`PE32+ executable (GUI) x86-64, for MS Windows`
Signature numérique	No valid SignedData structure was found.
Importations	4 bibliothèques bcrypt, KERNEL32, msvcrt, SHELL32
Exportations	0 fonctions
Ressources	0 Ressources
Sections	17 Sections

Sections PE

▼

Nom	Adresse virtuelle	Taille virtuelle	Taille brute	Entropie	Caractéristiques	MD5
`.text`	`0x00001000`	117,264 bytes	117,760 bytes	6.25 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`426343103645CE42CD1B714A481B0EFB`
`.data`	`0x0001e000`	130,656 bytes	131,072 bytes	6.79 (Compressé)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`004CF48592E10B231E66CBC2151179E2`
`.rdata`	`0x0003e000`	19,648 bytes	19,968 bytes	4.91 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`06237F62A0A2EB3DE0D218C552236B24`
`.pdata`	`0x00043000`	14,220 bytes	14,336 bytes	5.39 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1C1586569C3D006EC69448DBAEE23E81`
`.xdata`	`0x00047000`	11,556 bytes	11,776 bytes	4.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`124B98A9A202D01C6BE5C5F63D750014`
`.bss`	`0x0004a000`	3,152 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0004b000`	4,676 bytes	5,120 bytes	3.94 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`546DC1BC37AB75B27A9717FDFD169566`
`.tls`	`0x0004d000`	16 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.reloc`	`0x0004e000`	1,096 bytes	1,536 bytes	4.51 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`30E19C1411A59210F7093E743D430282`
`/4`	`0x0004f000`	176 bytes	512 bytes	0.62 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`AFA38A6E6826DDFFB043EF387A17F8C4`
`/19`	`0x00050000`	18,956 bytes	19,456 bytes	5.77 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`DE513B01EEA017A64EE7606A04BC8A5D`
`/31`	`0x00055000`	2,118 bytes	2,560 bytes	4.38 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`98FB64F9EC8915CB5A4825473806EF6B`
`/45`	`0x00056000`	2,249 bytes	2,560 bytes	4.52 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`EDF310E1DCF9E50343A5B15491366267`
`/57`	`0x00057000`	984 bytes	1,024 bytes	3.70 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`826256A58A65F9A112EC4277A4ADD4A0`
`/70`	`0x00058000`	168 bytes	512 bytes	2.41 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`A11AD7E3390329ABC69674049C407B58`
`/81`	`0x00059000`	738 bytes	1,024 bytes	4.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`56A99C417E2BE861C632F9976BF651BF`
`/97`	`0x0005a000`	1,541 bytes	2,048 bytes	3.94 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`E3DFFD4DCA10382295D5740D4AAAC5C5`

Alerte d'analyse d'entropie

1 section(s) avec entropie élevée (≥6.5) - compression possible

Analyse de la chaîne de certificats

▼

Aucune signature numérique

Ce fichier n'est pas signé numériquement.

Implications de sécurité:

Impossible de vérifier l'identité de l'éditeur
Risque de sécurité accru lors de l'exécution de ce fichier
Peut déclencher des avertissements de sécurité sur certains systèmes

⚠ Ce fichier n'a pas de signature numérique ou la chaîne de certificats n'a pas pu être vérifiée.
Soyez prudent lors de l'exécution de fichiers non signés provenant de sources inconnues.

Statut de vérification du certificat

No valid SignedData structure was found.

Recommandation: Vérifiez la source du fichier et assurez-vous qu'il provient d'un éditeur de confiance.

Rapport d'analyse de crypted.exe