DiBS 0 8 3 exe (Godot Engine) Godot Engine 文件恶意软件分析

DiBS_0.8.3.exe (Godot Engine) 文件分析

更新于 2 months ago

检查者 Malware Check

DiBS_0.8.3.exe

哈希类型	值	操作
MD5	f69130f803e984b1e22a153952ddd944
SHA1	9d97ebfa37cc8ac3a88143f784699a24675d629f
SHA256	38ad20b271e97cce3b0a2cbcb37ca68cacefca9ed603bcdab54ab17e25d1abd4
SHA512	40e92bbe0c1fcbf0c1036647162225a4ffe2c91e6ad3304b40222f37c879cf5f41620a05370b3b7bfad538a7eca7b72ab3560a4b06534bd66d8ee83250214486
ImpHash	76050085956cd78e4d3f082d2d38d0de

哈希类型

值

操作

MD5

f69130f803e984b1e22a153952ddd944

SHA1

9d97ebfa37cc8ac3a88143f784699a24675d629f

SHA256

38ad20b271e97cce3b0a2cbcb37ca68cacefca9ed603bcdab54ab17e25d1abd4

SHA512

40e92bbe0c1fcbf0c1036647162225a4ffe2c91e6ad3304b40222f37c879cf5f41620a05370b3b7bfad538a7eca7b72ab3560a4b06534bd66d8ee83250214486

ImpHash

76050085956cd78e4d3f082d2d38d0de

PE 分析

基本信息

▼

图标	哈希: 2735f11aab1fa21e3ae0c1fcb000634a 模糊: 1be073df6899a6f59dd0e50927c730f4 dHash: b664f0ac6cd87170
映像基址	`0x00400000`
入口点	`0x004014c0`
编译时间	1970-01-01 00:00:00
校验和	0x02214759 (实际: 0x0221c725)
操作系统版本	4.0
PEiD 签名	`PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows`
数字签名	No valid SignedData structure was found.
导入	18 库
导出	5 函数
资源	9 资源
节	13 节

版本信息

▼

CompanyName	Godot Engine
FileDescription	Godot Engine
FileVersion	3.4.4
ProductName	DiBS
Licence	MIT
LegalCopyright	Copyright (c) 2007-2022 Juan Linietsky, Ariel Manzur and contributors
Info	https://godotengine.org
ProductVersion	3.4.4.stable.official
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	29,410,936 bytes	29,411,328 bytes	6.39 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_32BYTES`	`FBD3B8B7A9867474CFB203ECFA588F2E`
`.data`	`0x01c0e000`	25,664 bytes	26,112 bytes	2.18 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`6C537D18E144DC726F92EE6F34688FDF`
`.rdata`	`0x01c15000`	3,372,640 bytes	3,373,056 bytes	6.01 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_256BYTES`	`680AEB83FB0C497D9FA83D8AD90256B2`
`pck`	`0x01f4d000`	8 bytes	512 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_8BYTES`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.pdata`	`0x01f4e000`	542,832 bytes	543,232 bytes	6.91 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`F79D3830C43983E2C23C41E8D668946D`
`.xdata`	`0x01fd3000`	2,081,172 bytes	2,081,280 bytes	5.86 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`EEE317CBE256C5F40FE1297AAF47FA3F`
`.bss`	`0x021d0000`	75,440 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_32BYTES`	`D41D8CD98F00B204E9800998ECF8427E`
`.edata`	`0x021e3000`	209 bytes	512 bytes	2.81 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`6B969A81493467058969519EB0BD1F66`
`.idata`	`0x021e4000`	15,700 bytes	15,872 bytes	4.82 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`8CAFF41F9BB2275BF72A73BE1786C319`
`.CRT`	`0x021e8000`	112 bytes	512 bytes	0.40 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_8BYTES`	`B50512CF3E59EE4C33DFBE1D37ACDC04`
`.tls`	`0x021e9000`	16 bytes	512 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_8BYTES`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x021ea000`	102,752 bytes	102,912 bytes	3.52 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE\|IMAGE_SCN_ALIGN_4BYTES`	`2B85B9239BC124007B496B46A486CB68`
`.reloc`	`0x02204000`	159,976 bytes	160,256 bytes	5.47 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_ALIGN_4BYTES`	`ECE480698CE3C767F24B66E1C4B985D0`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 9 (102,204 字节)

资源类型	数量	总大小	百分比
RT_ICON	6	101,216 字节	99%
RT_GROUP_ICON	2	180 字节	0.2%
RT_VERSION	1	808 字节	0.8%

证书链分析

▼

证书 Information

产品	DiBS
描述	Godot Engine
文件版本	3.4.4
版权	Copyright (c) 2007-2022 Juan Linietsky, Ariel Manzur and contributors

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	DiBS_0.8.3.exe
文件类型	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
扫描器版本	1.0.228.174
数据库版本	2025-11-07 06:00:23 UTC

DiBS_0.8.3.exe (Godot Engine) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别