BinkW32 DLL (RAD Video Tools) RAD Game Tools, Inc 文件恶意软件分析

哈希类型	值	操作
MD5	002cdf612509807b33e4ab09c686a966
SHA1	73a2ee8ec4c074b6a5c5485c615ee7ce230137e0
SHA256	2d0ae23a6175dc7b635c402a5e7e9542e923c0d1c376a8c5ef876ca0d5959d23
SHA512	e6d1c3f5e33ff8fc56b4798a6155ae76411ba9a234bea599338b7af424051943b1a2e666baa6935975df3d0354ba435962d1281b88b1ea17a77b1fbeb2cecca2
ImpHash	863844ad7aa759748e31329c65f10f35

PE 分析

基本信息

▼

图标	哈希: 0a90235094a71d415860145540e74628 模糊: e98a80edc16daf72a41c04b1dd054906 dHash: a442f0f0f071724e
映像基址	`0x30000000`
入口点	`0x30006ab1`
编译时间	2003-04-17 02:19:57
校验和	0x00000000 (实际: 0x0005be16)
操作系统版本	4.0
PEiD 签名	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
PDB 路径	`D:\Devel\Projects\bink\build\binkw32.pdb`
数字签名	No valid SignedData structure was found.
导入	4 库 USER32, GDI32, KERNEL32, WINMM
导出	85 函数
资源	7 资源
节	36 节

版本信息

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.5v
LegalCopyright	Copyright (C) 1994-2003, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.5v
Comments	Thank you for using Bink and Smacker!

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	54,512 bytes	54,784 bytes	6.68 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F5931B146C87797572D249BF434B9F3`
`BINK`	`0x0000f000`	77,210 bytes	77,312 bytes	6.59 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B353CD0FAEEA3C0CD2D0DAECE4F2F7E2`
`BINK16`	`0x00022000`	6,429 bytes	6,656 bytes	6.11 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E95FB9E50E548F7390D29BB6C0ED9220`
`BINK4444`	`0x00024000`	7,375 bytes	7,680 bytes	6.11 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`114B8B3BFD027CAEB152A9B2154D70C0`
`BINK5551`	`0x00026000`	6,374 bytes	6,656 bytes	6.17 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F95BFF63B08CC0DD134CC3C76E3A5B9`
`BINK32`	`0x00028000`	6,250 bytes	6,656 bytes	6.04 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6B3317A45F9B7BA4C62023321092F7AB`
`BINK32A`	`0x0002a000`	7,360 bytes	7,680 bytes	6.12 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F2F9E4C8DA9860C301F61F11313E38DF`
`BINK16X2`	`0x0002c000`	3,114 bytes	3,584 bytes	5.73 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AD02BD1BA2FD31896F1B9BC43E77B8A8`
`BINK32X2`	`0x0002d000`	3,238 bytes	3,584 bytes	5.95 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`405C5B7AD2F5F6DB1838AD24AE9474E0`
`BINK16MX`	`0x0002e000`	515 bytes	1,024 bytes	3.89 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E2F414312A7F6EBE68A467B404567618`
`BINK32MX`	`0x0002f000`	687 bytes	1,024 bytes	4.82 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C1F17F181316B82834FA5CB16EECCDED`
`BINK16M`	`0x00030000`	503 bytes	512 bytes	5.83 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B4C9B4D7F4331AB02F0C306580308554`
`BINK32M`	`0x00031000`	547 bytes	1,024 bytes	4.09 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D148D14435E2178CD4504B40E92806E6`
`BINKYUY2`	`0x00032000`	361 bytes	512 bytes	4.78 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`025BE532C4886B1B22B02390E4AADD46`
`BINKYUY2`	`0x00033000`	3,455 bytes	3,584 bytes	5.89 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2FB150521E1A9CE7C31F6CE5F065A3FF`
`BINKYUY2`	`0x00034000`	492 bytes	512 bytes	5.73 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DB342C40740D86199B5C4C1CC634B5A8`
`BINKYUY2`	`0x00035000`	292 bytes	512 bytes	4.05 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`72C481A56E618C7981CABBD51FC37AA4`
`BINK32R`	`0x00036000`	5,226 bytes	5,632 bytes	6.07 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D819C9EA61C20B2193457A0064FDB2D8`
`BINK32RA`	`0x00038000`	5,696 bytes	6,144 bytes	6.11 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DC26195EAB4ADE20B1E54B978CDD743B`
`BINK32RX`	`0x0003a000`	3,238 bytes	3,584 bytes	5.95 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F0DA84CC064542C2E07203D31F50D237`
`BINK24`	`0x0003b000`	7,350 bytes	7,680 bytes	6.11 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`30483EF005C4D6BE2E496E99AAF03207`
`BINK24X2`	`0x0003d000`	4,190 bytes	4,608 bytes	6.01 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`35B9B5364AE0A6EEE152CCBC4558544E`
`BINK24M`	`0x0003f000`	714 bytes	1,024 bytes	5.04 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BB93AB16735EBBEAC01D89CC4ACED61F`
`BINK24R`	`0x00040000`	6,182 bytes	6,656 bytes	6.08 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8C33C21C3C2E33A6BA26F35937B5CB60`
`BINK24RX`	`0x00042000`	4,190 bytes	4,608 bytes	6.01 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C7926EA27FFC0F88F5E745F37E08FAE8`
`BINK24RM`	`0x00044000`	804 bytes	1,024 bytes	5.47 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`95D23863439C3AE527ABA10D47854B27`
`BINKUYVY`	`0x00045000`	488 bytes	512 bytes	5.76 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2DB773CB12DA6F00FDCBB0F3F0EDF4C3`
`BINKUYVY`	`0x00046000`	369 bytes	512 bytes	4.92 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`68B20821243E8B91A5BDED471D7BDDF8`
`BINKUYVY`	`0x00047000`	3,599 bytes	4,096 bytes	5.60 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DC33D39A0CAE1B221A94E31375624246`
`BINKUYVY`	`0x00048000`	327 bytes	512 bytes	4.22 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2016B4C70AF003CD30A8080468828CDB`
`BINKYV12`	`0x00049000`	704 bytes	1,024 bytes	4.67 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EAAA12586820D12D502BD723B8542523`
`.rdata`	`0x0004a000`	44,823 bytes	45,056 bytes	6.43 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8B6CA0009D69C45A44BE2B4905718D3C`
`.data`	`0x00055000`	13,412 bytes	2,560 bytes	5.14 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`96E5000E37961CCA17E0F3F0299BC74B`
`BINKDATA`	`0x00059000`	64,688 bytes	65,024 bytes	2.73 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A18666F192A335EF1D1B33C073F8B29F`
`.rsrc`	`0x00069000`	8,496 bytes	8,704 bytes	4.71 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`03EE5487E367143927041639D05D1B10`
`.reloc`	`0x0006c000`	21,348 bytes	21,504 bytes	6.67 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`CBFB939A7C16BB9C70BB8FE031589D1F`

熵分析警报

3 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 7 (8,040 字节)

资源类型	数量	总大小	百分比
RT_ICON	4	7,008 字节	87.2%
RT_STRING	1	130 字节	1.6%
RT_GROUP_ICON	1	62 字节	0.8%
RT_VERSION	1	840 字节	10.4%

证书链分析

▼

证书 Information

产品	Bink and Smacker
描述	RAD Video Tools
文件版本	1.5v
版权	Copyright (C) 1994-2003, RAD Game Tools, Inc.

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

文件名	BinkW32.DLL
文件类型	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.211.174
数据库版本	2025-03-19 08:00:28 UTC

BinkW32.DLL (RAD Video Tools) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别

PE 分析

基本信息

版本信息

PE 节

熵分析警报

资源分析

证书链分析

证书 Information

证书验证状态

记住：这是在线病毒扫描器的结果

保护您的系统

发表评论

Gridinsoft Anti-Malware