El Análisis de Malware del Archivo VLC media player (VLC media player) VideoLAN

Tipo de Hash	Valor	Acción
MD5	25556ea1df965ccad41e65db9e255866
SHA1	674b8f7b2f60f4a43ccba17c4608d3f6a15e4b79
SHA256	f77971b5d75d97a322a2c2a4a3fd3269c4a32388c8ad7ae80b7dcc7cefe321d6
SHA512	f1a21315cd260e370241529e0d50031c2c195d0b4120b3055fa252ad7533899aa6f03c367158a514ae2213eafab53ebea4754877e40bf41c77a8357587ebb45f
ImpHash	dce96bc6319a78e5eaf9315128c98209

Información Básica

▼

Base de Imagen	`0x140000000`
Punto de Entrada	`0x1400013d0`
Tiempo de Compilación	2060-11-11 05:00:16
Suma de Verificación	0x002af735 (Real: 0x002ba314)
Versión del SO	4.0
Firmas PEiD	`PE32+ executable (DLL) (console) x86-64, for MS Windows`
Firma Digital	The expected hash does not match the digest in SpcInfo
Importaciones	6 bibliotecas ADVAPI32, KERNEL32, msvcrt, SHELL32, USER32, WS2_32
Exportaciones	764 funciones
Recursos	2 Recursos
Secciones	14 Secciones

Firmas Digitales

▼

DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert SHA2 Assured ID Code Signing CA	VideoLAN (FR)
DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA	DigiCert (US)

Información de Versión

▼

CompanyName	VideoLAN
ProductName	VLC media player
ProductVersion	3,0,18,0
FileVersion	3.0.18
FileDescription	VLC media player
LegalCopyright	Copyright © 1996-2022 VideoLAN and VLC Authors
LegalTrademarks	VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
Translation	0x0409 0x04e4

Secciones PE

▼

Nombre	Dirección Virtual	Tamaño Virtual	Tamaño Bruto	Entropía	Características	MD5
`.text`	`0x00001000`	1,490,920 bytes	1,490,944 bytes	6.41 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_64BYTES`	`4CD5B8155C0A2AFF2BA18E1B6793B8E9`
`.data`	`0x0016d000`	18,136 bytes	18,432 bytes	4.57 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_64BYTES`	`072D6D61D210A2EF6090E1030DE65D9B`
`.rdata`	`0x00172000`	1,144,752 bytes	1,144,832 bytes	7.09 (Comprimido)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_32BYTES`	`38013FF0D4F07451080D13181A12BCA6`
`.buildid`	`0x0028a000`	53 bytes	512 bytes	0.57 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`C309C6A0E4B2462057A691FA0AC2F367`
`.pdata`	`0x0028b000`	43,860 bytes	44,032 bytes	6.10 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`14A223F8997D1C75D37F4CF1A97836E1`
`.xdata`	`0x00296000`	43,368 bytes	43,520 bytes	4.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`5A96C084B1806C8534979F9A9BF7F5FD`
`.bss`	`0x002a1000`	18,784 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`D41D8CD98F00B204E9800998ECF8427E`
`.edata`	`0x002a6000`	21,880 bytes	22,016 bytes	5.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`35B7D87582999ABBE05C1C29B03514BE`
`.idata`	`0x002ac000`	10,908 bytes	11,264 bytes	4.55 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`CB09DC81544925B66ED274DC27B6F1BD`
`.CRT`	`0x002af000`	88 bytes	512 bytes	0.24 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_8BYTES`	`2D12877EB7256D34C7F7F6B6486E2FEF`
`.tls`	`0x002b0000`	104 bytes	512 bytes	0.31 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`AFE61E906C7B5966C893BBA61A88451A`
`.rsrc`	`0x002b1000`	1,608 bytes	2,048 bytes	3.68 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`1F1A347049D1B8C25D97E028B916AC9E`
`.reloc`	`0x002b2000`	5,948 bytes	6,144 bytes	5.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`4E060D9C966EA4B3DD11D12A64B35FED`
`/4`	`0x002b4000`	24 bytes	512 bytes	0.42 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`A18B71916B5A01FD2922BDBC36741DD4`

Alerta de Análisis de Entropía

1 sección(es) con entropía elevada (≥6.5) - posible compresión

Análisis de Recursos

▼

Total de Recursos: 2 (1,441 bytes)

Tipo de Recurso	Cantidad	Tamaño Total	Porcentaje
RT_VERSION	1	844 bytes	58.6%
RT_MANIFEST	1	597 bytes	41.4%

Análisis de la Cadena de Certificados

▼

Certificado #1

Sujeto	DigiCert Assured ID Root CA DigiCert Inc US
Emisor	DigiCert Assured ID Root CA
Número de Serie	`17154717934120587862167794914071425081`

Certificado #2

Sujeto	DigiCert SHA2 Assured ID Code Signing CA DigiCert Inc US
Emisor	DigiCert Assured ID Root CA
Número de Serie	`5364131601516814570659357524942475272`

Certificado #3

Sujeto	VideoLAN VideoLAN FR
Emisor	DigiCert SHA2 Assured ID Code Signing CA
Número de Serie	`5356740797042686197271446732452264212`

Certificado #4

Sujeto	DigiCert Trusted Root G4 DigiCert Inc US
Emisor	DigiCert Assured ID Root CA
Número de Serie	`19414496059604725969669510860671817818`

Certificado #5

Sujeto	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US
Emisor	DigiCert Trusted Root G4
Número de Serie	`9586110043380832440035821245782711899`

Certificado #6

Sujeto	DigiCert Timestamp 2022 - 2 DigiCert US
Emisor	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
Número de Serie	`16352681515936560713148055516499426650`

Estado de Verificación del Certificado

The expected hash does not match the digest in SpcInfo

Recomendación: Verifique la fuente del archivo y asegúrese de que provenga de un editor confiable.

Nombre del Archivo	VLC media player
Tipo de Archivo	PE32+ executable (DLL) (console) x86-64, for MS Windows
Versión del Escáner	1.0.138.174
Versión de la Base de Datos	2023-09-12 20:01:59 UTC

El Análisis del Archivo VLC media player (VLC media player)

Análisis Técnico

Archivo Limpio

Escanear Otro Archivo

Identificación del Archivo

Análisis PE