The Evil Within The Complete Edition v1 02 [CentralDeTraducoes net br] exe Central de Traduções 文件恶意软件分析

The Evil Within The Complete Edition v1.02 [CentralDeTraducoes.net.br].exe 文件分析

更新于 1 month ago

检查者 Malaware Check

The Evil Within The Complete Edition v1.02 [CentralDeTraducoes.net.br].exe

哈希类型	值	操作
MD5	dab8acd45ab2456ae3097f94dbe999e8
SHA1	bbd725396bebf9a741f6e0c06e8b6e8b04155d80
SHA256	6373b7f7f9ef7b63f1041b543508bf0360bb22d62d873ff3530d072e1e6e9ec9
SHA512	849d57ba17774327b3d0a46db53e6bcd9322a56de0b516c11ec049d386f431724d064b46c611c57c4497ce70943153ffbfac69b226bd81192b32821d90fa8410
ImpHash	e569e6f445d32ba23766ad67d1e3787f

哈希类型

值

操作

MD5

dab8acd45ab2456ae3097f94dbe999e8

SHA1

bbd725396bebf9a741f6e0c06e8b6e8b04155d80

SHA256

6373b7f7f9ef7b63f1041b543508bf0360bb22d62d873ff3530d072e1e6e9ec9

SHA512

849d57ba17774327b3d0a46db53e6bcd9322a56de0b516c11ec049d386f431724d064b46c611c57c4497ce70943153ffbfac69b226bd81192b32821d90fa8410

ImpHash

e569e6f445d32ba23766ad67d1e3787f

PE 分析

基本信息

▼

图标	哈希: 64583443b0163d32c7c539cd1248753b 模糊: 85b90c639bce9a9daf197ef74e8168f7 dHash: 71cc9e9a868ee871
映像基址	`0x00400000`
入口点	`0x004b5eec`
编译时间	2023-02-15 14:54:16
校验和	0x00000000 (实际: 0x02f5ffb0)
操作系统版本	6.1
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	7 库 kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
导出	3 函数
资源	26 资源
节	10 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	Central de Traduções
FileDescription	Tradução do The Evil Within The Complete Edition Setup
FileVersion	1.1
LegalCopyright	Central de Traduções
OriginalFileName
ProductName	Tradução do The Evil Within The Complete Edition
ProductVersion	1.1
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	735,716 bytes	735,744 bytes	6.36 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`43AF0A9476CA224D8E8461F1E22C94DA`
`.itext`	`0x000b5000`	5,768 bytes	6,144 bytes	5.97 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`185E04B9A1F554E31F7F848515DC890C`
`.data`	`0x000b7000`	14,244 bytes	14,336 bytes	5.05 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CAB2107C933B696AA5CF0CC6C3FD3980`
`.bss`	`0x000bb000`	28,136 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000c2000`	4,060 bytes	4,096 bytes	5.03 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E7D1635E2624B124CFDCE6C360AC21CD`
`.didata`	`0x000c3000`	420 bytes	512 bytes	2.75 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8CED971D8A7705C98B173E255D8C9AA7`
`.edata`	`0x000c4000`	154 bytes	512 bytes	1.88 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D4E1E508031AFE235BF121C80FD7D5F`
`.tls`	`0x000c5000`	24 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000c6000`	93 bytes	512 bytes	1.38 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8F2F090ACD9622C88A6A852E72F94E96`
`.rsrc`	`0x000c7000`	576,344 bytes	576,512 bytes	6.11 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`998D7BB719FD02430221B92759CA528D`

资源分析

▼

资源总数: 26 (574,880 字节)

资源类型	数量	总大小	百分比
RT_ICON	9	562,568 字节	97.9%
RT_STRING	11	8,040 字节	1.4%
RT_RCDATA	3	768 字节	0.1%
RT_GROUP_ICON	1	132 字节	0%
RT_VERSION	1	1,412 字节	0.2%
RT_MANIFEST	1	1,960 字节	0.3%

证书链分析

▼

无数字签名

此文件未进行数字签名。

安全影响:

无法验证发布者的身份
运行此文件时安全风险增加
可能在某些系统上触发安全警告

⚠ 此文件缺少数字签名或证书链无法验证。
执行来自未知来源的未签名文件时请谨慎。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	The Evil Within The Complete Edition v1.02 [CentralDeTraducoes.net.br].exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.215.174
数据库版本	2025-05-01 18:00:23 UTC

The Evil Within The Complete Edition v1.02 [CentralDeTraducoes.net.br].exe 文件分析

技术分析

干净文件

扫描另一个文件

文件识别