HD2 Sneaky Stuff Injector exe (In a world of weak coding, there is no cheating only domination ) Igromanru 文件恶意软件分析

HD2-Sneaky-Stuff-Injector.exe (In a world of weak coding, there is no cheating - only domination.) 文件分析

更新于 17 days ago

检查者 Malware Check

HD2-Sneaky-Stuff-Injector.exe

哈希类型	值	操作
MD5	e81e11969708d83e75e75c27b074bad1
SHA1	d5bc249c2945406433791cc1f247c74a6039439b
SHA256	7fb2bd49fce9383c2c8b6eb765b9f42a769f66c8333ad936ddabd038097e9e5c
SHA512	57655a9058ca106a0dbe4bbe653070c1f744790fbc23cb8bc8591bafd56a64f3a694d4d604e2d4072085bca51fd8edca49d188ce10d4b5f157ed56533d689174
ImpHash	edfd14c84af2db99a9c1d2cede3cc1c8

哈希类型

值

操作

MD5

e81e11969708d83e75e75c27b074bad1

SHA1

d5bc249c2945406433791cc1f247c74a6039439b

SHA256

7fb2bd49fce9383c2c8b6eb765b9f42a769f66c8333ad936ddabd038097e9e5c

SHA512

57655a9058ca106a0dbe4bbe653070c1f744790fbc23cb8bc8591bafd56a64f3a694d4d604e2d4072085bca51fd8edca49d188ce10d4b5f157ed56533d689174

ImpHash

edfd14c84af2db99a9c1d2cede3cc1c8

PE 分析

基本信息

▼

图标	哈希: e8df10cbba1ac0ed9ccba33591ccfbe0 模糊: 65c5f951e7c957997454d5b16ec93719 dHash: 3271f0f0e8703070
映像基址	`0x140000000`
入口点	`0x1400059b8`
编译时间	2025-08-11 07:55:42
校验和	0x00000000 (实际: 0x00019c54)
操作系统版本	6.0
PEiD 签名	`PE32+ executable (console) x86-64, for MS Windows`
PDB 路径	`D:\Git\Cpp\Helldivers-2-Sneaky-Stuff\bin\x64\Release\HD2-Sneaky-Stuff-Injector.pdb`
数字签名	No valid SignedData structure was found.
导入	11 库
导出	0 函数
资源	15 资源
节	6 节

版本信息

▼

CompanyName	Igromanru
FileDescription	In a world of weak coding, there is no cheating - only domination.
FileVersion	1.0.0.0
InternalName	HD2-Sneaky-Stuff-Injector.exe
LegalCopyright	Igromanru Copyright (C) 2025
OriginalFilename	HD2-Sneaky-Stuff-Injector.exe
ProductName	Helldivers 2 Sneaky Stuff Injector
ProductVersion	1.0.0.0
Translation	0x0400 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	22,956 bytes	23,040 bytes	6.25 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B7224AC2D3CBA05F8935283C88976467`
`.rdata`	`0x00007000`	10,752 bytes	10,752 bytes	4.40 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5D762E7CD25E020F1877FC8A76895E06`
`.data`	`0x0000a000`	2,536 bytes	1,024 bytes	2.57 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`27E4FC408C445914FBE0BF5568E20F12`
`.pdata`	`0x0000b000`	1,464 bytes	1,536 bytes	4.19 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5C4F898F9DDD908106A8C3D74BE19D9E`
`.rsrc`	`0x0000c000`	53,624 bytes	53,760 bytes	4.73 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1439374933723E7A7720CF6A87556724`
`.reloc`	`0x0001a000`	164 bytes	512 bytes	2.21 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`5B9982F84713A75875D68EDD885A136C`

资源分析

▼

资源总数: 15 (52,786 字节)

资源类型	数量	总大小	百分比
RT_ICON	12	51,280 字节	97.1%
RT_GROUP_ICON	1	174 字节	0.3%
RT_VERSION	1	940 字节	1.8%
RT_MANIFEST	1	392 字节	0.7%

证书链分析

▼

证书 Information

产品	Helldivers 2 Sneaky Stuff Injector
描述	In a world of weak coding, there is no cheating - only domination.
文件版本	1.0.0.0
原始名称	HD2-Sneaky-Stuff-Injector.exe
内部名称	HD2-Sneaky-Stuff-Injector.exe
版权	Igromanru Copyright (C) 2025

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	HD2-Sneaky-Stuff-Injector.exe
文件类型	PE32+ executable (console) x86-64, for MS Windows
扫描器版本	1.0.231.174
数据库版本	2025-12-24 20:00:30 UTC

HD2-Sneaky-Stuff-Injector.exe (In a world of weak coding, there is no cheating - only domination.) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别