Setup exe (Age of Empires Gold Edition Setup) Microsoft, Inc 文件恶意软件分析

Setup.exe (Age of Empires Gold Edition Setup) 文件分析

更新于 1 day ago

检查者 Malware Check

setup.exe

哈希类型	值	操作
MD5	bbee33f4865c11b4ed7e983183203067
SHA1	415795a143a1c0dfd0d29ab6554425a6f2f8eb97
SHA256	9a8232f21cc10b69f859f77937944dd8b04ec2ee88e53c592e8b145b39637cd2
SHA512	c3a96328299a3eaa4d2dbf33e42d42124dc84702871ba2d683c5d48e57efaf26ce141288a309d952dc180826472ad7547fa20a1383aa8132b073c2f25822ff4a
ImpHash	483f0c4259a9148c34961abbda6146c1

哈希类型

值

操作

MD5

bbee33f4865c11b4ed7e983183203067

SHA1

415795a143a1c0dfd0d29ab6554425a6f2f8eb97

SHA256

9a8232f21cc10b69f859f77937944dd8b04ec2ee88e53c592e8b145b39637cd2

SHA512

c3a96328299a3eaa4d2dbf33e42d42124dc84702871ba2d683c5d48e57efaf26ce141288a309d952dc180826472ad7547fa20a1383aa8132b073c2f25822ff4a

ImpHash

483f0c4259a9148c34961abbda6146c1

PE 分析

基本信息

▼

图标	哈希: dd45c2c4a92b610151cc28421f8e8eae 模糊: 7962c7507ac6e530b5b2da7d2293e173 dHash: 70d8d0c2c1c1e1e0
映像基址	`0x00400000`
入口点	`0x00416478`
编译时间	2012-10-02 05:04:04
校验和	0x00000000 (实际: 0x000db2cd)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 oleaut32, advapi32, user32, kernel32, comctl32
导出	0 函数
资源	14 资源
节	8 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	Microsoft, Inc.
FileDescription	Age of Empires Gold Edition Setup
FileVersion
LegalCopyright
ProductName	Age of Empires Gold Edition
ProductVersion	1.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	82,936 bytes	82,944 bytes	6.48 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`345DB2B6911ADDC85B53F32245F969A0`
`.itext`	`0x00016000`	3,048 bytes	3,072 bytes	6.02 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2E74D968CAEDEB2D71B9505530D43907`
`.data`	`0x00017000`	3,484 bytes	3,584 bytes	2.67 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D5B22EFF9E08EDAA95F493C1A71158C0`
`.bss`	`0x00018000`	22,352 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0001e000`	3,998 bytes	4,096 bytes	4.97 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B47EACA4C149EE829DE76A342B5560D5`
`.tls`	`0x0001f000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00020000`	24 bytes	512 bytes	0.19 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3746F5876803F8F30DB5BB2DEB8772AE`
`.rsrc`	`0x00021000`	42,524 bytes	43,008 bytes	4.08 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`EB0909E17D7717E1F674EF505609BE56`

资源分析

▼

资源总数: 14 (41,616 字节)

资源类型	数量	总大小	百分比
RT_ICON	1	1,808 字节	4.3%
RT_STRING	6	3,200 字节	7.7%
RT_RCDATA	4	34,004 字节	81.7%
RT_GROUP_ICON	1	20 字节	0%
RT_VERSION	1	1,208 字节	2.9%
RT_MANIFEST	1	1,376 字节	3.3%

证书链分析

▼

证书 Information

产品	Age of Empires Gold Edition
描述	Age of Empires Gold Edition Setup

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.218.174
数据库版本	2025-06-16 00:00:23 UTC

Setup.exe (Age of Empires Gold Edition Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别