Sonic mania tcg plus exe (The official tool for creating your own Sonic Mania styled Title Cards!) Team Cyantix 文件恶意软件分析

Sonic-mania-tcg-plus.exe (The official tool for creating your own Sonic Mania styled Title Cards!) 文件分析

更新于 3 months ago

检查者 Malware Check

sonic-mania-tcg-plus.exe

哈希类型	值	操作
MD5	d59f31e2ee09fd5c43e7255f15bf9783
SHA1	facec5eb9c727ae8f1a82bbda91d50da1fbc9900
SHA256	a6fd7fcc51ad360bdddf1f5b9d369d0df38f00397905a779eb91b00ff8d69489
SHA512	dfe8887334e16b2ef3ff5731a8ebe1bf6250b52653630e2f8edd44c6d68ee82dd5c29725d3f0ba3a756c3a742acf5a0a84011cde0449087b77efb53f47890c21
ImpHash	646167cce332c1c252cdcb1839e0cf48

哈希类型

值

操作

MD5

d59f31e2ee09fd5c43e7255f15bf9783

SHA1

facec5eb9c727ae8f1a82bbda91d50da1fbc9900

SHA256

a6fd7fcc51ad360bdddf1f5b9d369d0df38f00397905a779eb91b00ff8d69489

SHA512

dfe8887334e16b2ef3ff5731a8ebe1bf6250b52653630e2f8edd44c6d68ee82dd5c29725d3f0ba3a756c3a742acf5a0a84011cde0449087b77efb53f47890c21

ImpHash

646167cce332c1c252cdcb1839e0cf48

PE 分析

基本信息

▼

图标	哈希: 663a9be3530ab1efe8e9ad43b1425a1e 模糊: 89dd81f6a60cc636dc849c0fa24c88ec dHash: 48914796da5a9232
映像基址	`0x00400000`
入口点	`0x00406a00`
编译时间	2068-06-21 06:07:02
校验和	0x02473aaa (实际: 0x0245efa1)
操作系统版本	10.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
PDB 路径	`wextract.pdb`
数字签名	No valid SignedData structure was found.
导入	8 库 ADVAPI32, KERNEL32, GDI32, USER32, msvcrt, COMCTL32, Cabinet, VERSION
导出	0 函数
资源	35 资源
节	5 节

版本信息

▼

CompanyName	Team Cyantix
FileDescription	The official tool for creating your own Sonic Mania styled Title Cards!
FileVersion	2.0.0.0
InternalName	Wextract
LegalCopyright
OriginalFilename	WEXTRACT.EXE .MUI
ProductName
ProductVersion	2.0.0.0
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	25,284 bytes	25,600 bytes	6.30 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AF345FF4844CAF4B46F0D1DE66BA215C`
`.data`	`0x00008000`	6,728 bytes	512 bytes	4.97 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`7B9890A93C0516BB070E1170CFDE54D5`
`.idata`	`0x0000a000`	4,178 bytes	4,608 bytes	5.02 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`6DD96376163996642EA3177EB8F57CE1`
`.rsrc`	`0x0000c000`	38,096,128 bytes	38,096,384 bytes	8.00 (打包/加密)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E725CCEDA00A64633E8535E39ED00806`
`.reloc`	`0x02461000`	2,184 bytes	2,560 bytes	6.27 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`DDBA0788E55665F614E9118142A37359`

熵分析警报

1 检测到高熵（≥7.5）的节 - 可能存在打包/加密

资源分析

▼

资源总数: 35 (38,093,938 字节)

资源类型	数量	总大小	百分比
AVI	1	11,802 字节	0%
RT_ICON	5	11,112 字节	0%
RT_DIALOG	6	2,584 字节	0%
RT_STRING	6	6,208 字节	0%
RT_RCDATA	14	38,058,070 字节	99.9%
RT_GROUP_ICON	1	76 字节	0%
RT_VERSION	1	2,068 字节	0%
RT_MANIFEST	1	2,018 字节	0%

证书链分析

▼

证书 Information

描述	The official tool for creating your own Sonic Mania styled Title Cards!
文件版本	2.0.0.0
原始名称	WEXTRACT.EXE .MUI
内部名称	Wextract

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	sonic-mania-tcg-plus.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.226.174
数据库版本	2025-10-07 20:00:27 UTC

Sonic-mania-tcg-plus.exe (The official tool for creating your own Sonic Mania styled Title Cards!) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别