Juiced exe (Juiced) Juice Games 文件恶意软件分析

Juiced.exe (Juiced) 文件分析

更新于 2 months ago

检查者 Malaware Check

Juiced.exe

哈希类型	值	操作
MD5	ca10abb98ef2c6845de5264d174f4380
SHA1	34b47530eb7e9fb9081bebdb4f80f95200ff4745
SHA256	c01235d92323f957ec114faadc2ac0e3c0cd16791ad1e9392936fb1a8dbd6065
SHA512	aded47ba557d3049704ee8ba0107f9646d0aa12ad701ebd9cd68096166cc8e2af093f47c97a04b8069f04740d0816567646223737b7802306ef9fc884a87b52e
ImpHash	39cfdc92c1ca1f01df2c82d9945434a8

哈希类型

值

操作

MD5

ca10abb98ef2c6845de5264d174f4380

SHA1

34b47530eb7e9fb9081bebdb4f80f95200ff4745

SHA256

c01235d92323f957ec114faadc2ac0e3c0cd16791ad1e9392936fb1a8dbd6065

SHA512

aded47ba557d3049704ee8ba0107f9646d0aa12ad701ebd9cd68096166cc8e2af093f47c97a04b8069f04740d0816567646223737b7802306ef9fc884a87b52e

ImpHash

39cfdc92c1ca1f01df2c82d9945434a8

PE 分析

基本信息

▼

图标	哈希: 44938fc136b25cbb3a08e67103653d38 模糊: db8b53ec5f6903d341ea5bacec0b7f5b dHash: 00a4d86064b4b802
映像基址	`0x00400000`
入口点	`0x005cd316`
编译时间	2005-07-08 15:12:14
校验和	0x01d44ad7 (实际: 0x01cc224d)
操作系统版本	4.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	12 库
导出	0 函数
资源	9 资源
节	11 节

版本信息

▼

Comments	The Game, PCJUIEB0008
CompanyName	Juice Games
FileDescription	Juiced
FileVersion	0, 0, 1, 8
InternalName	mainGame
LegalCopyright	Copyright (C) 2004
OriginalFilename	mainGame.exe
ProductName	Juiced PC Game
ProductVersion	0, 0, 1, 8
SpecialBuild	PCJUIEB0008
Translation	0x0809 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	2,928,640 bytes	2,925,056 bytes	6.72 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`49CAD30ABDE04643CEBFC8E16C7F847C`
`.rdata`	`0x002cc000`	229,376 bytes	225,792 bytes	5.55 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A8FAE5A22C4EB373A59FF4A48B031A1A`
`.data`	`0x00304000`	667,648 bytes	145,920 bytes	3.36 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`7E872D289E9F04C3C1235C2C553A7ABF`
`.tls`	`0x003a7000`	4,096 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x003a8000`	12,288 bytes	9,216 bytes	2.87 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`25D2C0B75A1EF31764571496752F7D39`
`.text`	`0x003ab000`	5,386,240 bytes	5,385,216 bytes	6.35 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D2BD44B2A5C6D5DF973B7CA0AA332E6C`
`.init`	`0x008ce000`	53,248 bytes	51,712 bytes	6.21 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`31BBA2AF153CE4016ABA57F763D42E70`
`.data`	`0x008db000`	2,850,816 bytes	2,845,696 bytes	3.49 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`AAD1880800CA1A4F2F58ED29EAA6F171`
`.securom`	`0x00b93000`	643,072 bytes	604,672 bytes	6.91 (压缩)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`90B80185E6DD334AC80BB9D526161753`
	`0x00c30000`	17,899,520 bytes	17,897,984 bytes	1.11 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8642868487FBBE8A8E695ACC4D71684C`
`.SCY`	`0x01d42000`	8,192 bytes	5,120 bytes	5.63 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F7BA42F1ED5A6BFC80AB09766C30688A`

熵分析警报

2 检测到较高熵（≥6.5）的节 - 可能存在压缩

资源分析

▼

资源总数: 9 (8,276 字节)

资源类型	数量	总大小	百分比
RT_ICON	4	4,640 字节	56.1%
RT_DIALOG	3	2,742 字节	33.1%
RT_GROUP_ICON	1	62 字节	0.7%
RT_VERSION	1	832 字节	10.1%

证书链分析

▼

证书 Information

产品	Juiced PC Game
描述	Juiced
文件版本	0, 0, 1, 8
原始名称	mainGame.exe
内部名称	mainGame
版权	Copyright (C) 2004

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Juiced.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.212.174
数据库版本	2025-04-08 08:00:59 UTC

Juiced.exe (Juiced) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别