DarkSoulsII exe (DARK SOULS (TM) II: Scholar of the First Sin) NAMCO BANDAI Games 文件恶意软件分析

DarkSoulsII.exe (DARK SOULS (TM) II: Scholar of the First Sin) 文件分析

更新于 6 months ago

检查者 Malware Check

DarkSoulsII.exe

哈希类型	值	操作
MD5	89fe583e88722817d7982cd68c8c79a6
SHA1	ece427cf02449977ebb4aac577ac229bd0214bca
SHA256	b2a52fc498dacc742f1d701291a95623439328e3ff954bab88fc209dde7966c1
SHA512	8ea81557bee02a8ef5f05716dcf81f1e512fa9eab8cdd25558f893649d3b521621807885df80f2e615f7977fb6a6402843162f437a4ba80d195bc52de83877fd
ImpHash	f026a7a7f88307ebf3a35c9b5c33b80f

哈希类型

值

操作

MD5

89fe583e88722817d7982cd68c8c79a6

SHA1

ece427cf02449977ebb4aac577ac229bd0214bca

SHA256

b2a52fc498dacc742f1d701291a95623439328e3ff954bab88fc209dde7966c1

SHA512

8ea81557bee02a8ef5f05716dcf81f1e512fa9eab8cdd25558f893649d3b521621807885df80f2e615f7977fb6a6402843162f437a4ba80d195bc52de83877fd

ImpHash

f026a7a7f88307ebf3a35c9b5c33b80f

PE 分析

基本信息

▼

图标	哈希: 32820d18b3c18361e8178de094a1fd1c 模糊: ddb1b875908232e0ce1ea126c3680613 dHash: d0c271d8d4f0f0d0
映像基址	`0x140000000`
入口点	`0x140c29650`
编译时间	2015-04-20 10:59:34
校验和	0x01e33aae (实际: 0x01dbd4cc)
操作系统版本	6.0
PEiD 签名	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB 路径	`N:\FRPG2_64\source\FRPG2\Title\Project\vc2012\x64\Steam_Master_BNG\FRPG2.pdb`
数字签名	No valid SignedData structure was found.
导入	15 库
导出	0 函数
资源	22 资源
节	7 节

版本信息

▼

Comments
CompanyName	NAMCO BANDAI Games
FileDescription	DARK SOULS (TM) II: Scholar of the First Sin
FileVersion	1,0,2,0
InternalName	DARK SOULS (TM) II: Scholar of the First Sin
LegalCopyright	DARK SOULS (TM) II & (C)2015 NAMCO BANDAI Games Inc. (C)2011-2015 FromSoftware, Inc.
ProductName	DARK SOULS (TM) II: Scholar of the First Sin
ProductVersion	1,0,2,0
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	17,420,288 bytes	17,420,288 bytes	6.39 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C50F9D09026DD7EA73F4D3BDC6A32AC8`
`.rdata`	`0x0109e000`	4,935,680 bytes	4,932,608 bytes	5.13 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FA10DFE21D32C017EC96F44286BA1D32`
`.data`	`0x01553000`	3,399,680 bytes	715,264 bytes	4.86 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`7E708B539EEE4DC453E37E0547D5EC15`
`.pdata`	`0x01891000`	1,142,784 bytes	1,142,784 bytes	6.86 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`88811D36D4439DDD7075485B453E97DD`
`.rsrc`	`0x019a8000`	749,568 bytes	748,032 bytes	5.86 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C649212F11F0A6FC9E6E1275CE0318AF`
`.reloc`	`0x01a5f000`	266,240 bytes	262,656 bytes	5.48 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`107E36117B8D11B745957FCF98DBD584`
`.text`	`0x01aa0000`	5,912,576 bytes	5,912,576 bytes	5.61 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AE77451935F7AF176A00E2BE0C06D417`

熵分析警报

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 22 (746,295 字节)

资源类型	数量	总大小	百分比
RT_CURSOR	1	4,268 字节	0.6%
RT_ICON	12	739,936 字节	99.1%
RT_MENU	1	112 字节	0%
RT_DIALOG	1	300 字节	0%
RT_STRING	1	78 字节	0%
RT_ACCELERATOR	1	16 字节	0%
RT_GROUP_CURSOR	1	20 字节	0%
RT_GROUP_ICON	2	180 字节	0%
RT_VERSION	1	1,004 字节	0.1%
RT_MANIFEST	1	381 字节	0.1%

证书链分析

▼

证书 Information

产品	DARK SOULS (TM) II: Scholar of the First Sin
描述	DARK SOULS (TM) II: Scholar of the First Sin
文件版本	1,0,2,0
内部名称	DARK SOULS (TM) II: Scholar of the First Sin
版权	DARK SOULS (TM) II & (C)2015 NAMCO BANDAI Games Inc. (C)2011-2015 FromSoftware, Inc.

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	DarkSoulsII.exe
文件类型	PE32+ executable (GUI) x86-64, for MS Windows
扫描器版本	1.0.217.174
数据库版本	2025-05-28 01:00:13 UTC

DarkSoulsII.exe (DARK SOULS (TM) II: Scholar of the First Sin) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别