Axyn Adventure Demo exe (A 3D adult platformer game) Shinlalala's Games 文件恶意软件分析

Axyn Adventure Demo.exe (A 3D adult platformer game) 文件分析

更新于 10 days ago

检查者 Malware Check

Axyn Adventure Demo.exe

哈希类型	值	操作
MD5	714187ab9e650af011084388e8dd57aa
SHA1	8b0222d939c0e1b29edc0dcd8282a8d8114cfd0a
SHA256	b88765d89b10ab417b1180c7a5fe58e5b914b748cf3695b4ab6821b96eb140e2
SHA512	23880fe1340684eb4c05325666d0edbab35cf52631032e72fb9e6b97f63a39cbe3176c0a3fb93776b03f88dd719f2d2eae8870d52ee15e913c30275ac87501b6
ImpHash	e4403b97a72f487b474064126888e8c5

哈希类型

值

操作

MD5

714187ab9e650af011084388e8dd57aa

SHA1

8b0222d939c0e1b29edc0dcd8282a8d8114cfd0a

SHA256

b88765d89b10ab417b1180c7a5fe58e5b914b748cf3695b4ab6821b96eb140e2

SHA512

23880fe1340684eb4c05325666d0edbab35cf52631032e72fb9e6b97f63a39cbe3176c0a3fb93776b03f88dd719f2d2eae8870d52ee15e913c30275ac87501b6

ImpHash

e4403b97a72f487b474064126888e8c5

PE 分析

基本信息

▼

图标	哈希: 33dad00871ccf79bfe522f4b49a6b78b 模糊: 605c276b578d63fb53558f02c757f343 dHash: 93a35b918a98d87c
映像基址	`0x140000000`
入口点	`0x1400013d0`
编译时间	1970-01-01 00:00:00
校验和	0x04298d2f (实际: 0x0428c3c3)
操作系统版本	4.0
PEiD 签名	`PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows`
数字签名	No valid SignedData structure was found.
导入	21 库
导出	18 函数
资源	9 资源
节	13 节

版本信息

▼

CompanyName	Shinlalala's Games
FileDescription	A 3D adult platformer game
FileVersion	0.4.3.0
ProductName	Axyn Adventure
Licence	MIT
LegalCopyright	Copyright (c) 2007-2023 Juan Linietsky, Ariel Manzur and contributors
Info	https://godotengine.org
ProductVersion	0.4.3.0
Translation	0x0409 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	56,288,824 bytes	56,289,280 bytes	6.31 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0ECFC0835848E7BA291BFAD19AE968DD`
`.data`	`0x035b0000`	310,560 bytes	310,784 bytes	1.84 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A28973B72B64D31952D36C4236F21FC2`
`.rdata`	`0x035fc000`	9,920,560 bytes	9,921,024 bytes	6.16 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`92F6563706BD39D1BEFFCBC06915DA6A`
`pck`	`0x03f73000`	8 bytes	512 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.pdata`	`0x03f74000`	1,217,964 bytes	1,218,048 bytes	7.08 (压缩)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B333507E1B7F5E9D4563DC9358E688C4`
`.xdata`	`0x0409e000`	1,541,984 bytes	1,542,144 bytes	4.94 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`E7B43FD4B63C2045261F3F9FD214960F`
`.bss`	`0x04217000`	1,790,016 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.edata`	`0x043cd000`	1,101 bytes	1,536 bytes	4.58 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4DFF72702177FEDE7F30A2AC980B24D2`
`.idata`	`0x043ce000`	20,116 bytes	20,480 bytes	5.07 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`2DCEBE346C086A20C56010AF6C70C317`
`.CRT`	`0x043d3000`	112 bytes	512 bytes	0.49 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F0FDEDE870D7054044F38E6AF91C237C`
`.tls`	`0x043d4000`	16 bytes	512 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x043d5000`	139,580 bytes	139,776 bytes	7.98 (打包/加密)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F7979D089071C751A8804A834F66FA46`
`.reloc`	`0x043f8000`	322,116 bytes	322,560 bytes	5.46 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`23AFB416A27BFB09D4F0C703C3AF8476`

熵分析警报

1 检测到高熵（≥7.5）的节 - 可能存在打包/加密

1 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 9 (139,023 字节)

资源类型	数量	总大小	百分比
RT_ICON	6	138,007 字节	99.3%
RT_GROUP_ICON	2	180 字节	0.1%
RT_VERSION	1	836 字节	0.6%

证书链分析

▼

证书 Information

产品	Axyn Adventure
描述	A 3D adult platformer game
文件版本	0.4.3.0
版权	Copyright (c) 2007-2023 Juan Linietsky, Ariel Manzur and contributors

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Axyn Adventure Demo.exe
文件类型	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
扫描器版本	1.0.228.174
数据库版本	2025-11-06 16:00:30 UTC

Axyn Adventure Demo.exe (A 3D adult platformer game) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别