Setup exe (Grand Theft Auto San Andreas Setup) Релиз от R G Steamgames 文件恶意软件分析

Setup.exe (Grand Theft Auto San Andreas Setup) 文件分析

更新于 1 month ago

检查者 Malware Check

Setup.exe

哈希类型	值	操作
MD5	397b90a5665ea625e492b176dad5a3de
SHA1	80c270cdce5b6aa01e4a5599ab479267ee61a225
SHA256	0368063d13bc1f22b97ba7bb772ecdf5063dbbe5fe709b47702ce3fb971d367a
SHA512	d80ebd552a1fc319c53da68f41bffbef7b5727f2f72b005475781a2cb49a1a61e99c0a413ca24bfb1fad4bdf64fa6dae229cc860b72879b930fa99e158d4cbdc
ImpHash	483f0c4259a9148c34961abbda6146c1

哈希类型

值

操作

MD5

397b90a5665ea625e492b176dad5a3de

SHA1

80c270cdce5b6aa01e4a5599ab479267ee61a225

SHA256

0368063d13bc1f22b97ba7bb772ecdf5063dbbe5fe709b47702ce3fb971d367a

SHA512

d80ebd552a1fc319c53da68f41bffbef7b5727f2f72b005475781a2cb49a1a61e99c0a413ca24bfb1fad4bdf64fa6dae229cc860b72879b930fa99e158d4cbdc

ImpHash

483f0c4259a9148c34961abbda6146c1

PE 分析

基本信息

▼

图标	哈希: 0dfe06881e76bb26077d6e97f6b4369f 模糊: 921b1785fe543dcb7abd30cc13b08e43 dHash: 8e8e868e8e8c86ca
映像基址	`0x00400000`
入口点	`0x00416478`
编译时间	2012-10-02 05:04:04
校验和	0x00000000 (实际: 0x0011ff7a)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 oleaut32, advapi32, user32, kernel32, comctl32
导出	0 函数
资源	19 资源
节	8 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	Релиз от R.G. Steamgames
FileDescription	Grand Theft Auto San Andreas Setup
FileVersion
LegalCopyright	R.G. Steamgames
ProductName	Grand Theft Auto San Andreas
ProductVersion	1.00
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	82,936 bytes	82,944 bytes	6.48 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`345DB2B6911ADDC85B53F32245F969A0`
`.itext`	`0x00016000`	3,048 bytes	3,072 bytes	6.02 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2E74D968CAEDEB2D71B9505530D43907`
`.data`	`0x00017000`	3,484 bytes	3,584 bytes	2.67 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D5B22EFF9E08EDAA95F493C1A71158C0`
`.bss`	`0x00018000`	22,352 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0001e000`	3,998 bytes	4,096 bytes	4.97 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B47EACA4C149EE829DE76A342B5560D5`
`.tls`	`0x0001f000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00020000`	24 bytes	512 bytes	0.19 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3746F5876803F8F30DB5BB2DEB8772AE`
`.rsrc`	`0x00021000`	410,996 bytes	411,136 bytes	5.49 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A75B77C70024FB24B010C3479B132B61`

资源分析

▼

资源总数: 19 (409,846 字节)

资源类型	数量	总大小	百分比
RT_ICON	6	369,968 字节	90.3%
RT_STRING	6	3,200 字节	0.8%
RT_RCDATA	4	34,004 字节	8.3%
RT_GROUP_ICON	1	90 字节	0%
RT_VERSION	1	1,208 字节	0.3%
RT_MANIFEST	1	1,376 字节	0.3%

证书链分析

▼

证书 Information

产品	Grand Theft Auto San Andreas
描述	Grand Theft Auto San Andreas Setup
版权	R.G. Steamgames

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.229.174
数据库版本	2025-11-12 13:00:17 UTC

Setup.exe (Grand Theft Auto San Andreas Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别