Setup exe (Need for Speed Most Wanted 2005 Setup) EA Games 文件恶意软件分析

Setup.exe (Need for Speed Most Wanted 2005 Setup) 文件分析

更新于 3 months ago

检查者 Malaware Check

setup.exe

哈希类型	值	操作
MD5	db63ecc446d79141a12cc1dd13fa377e
SHA1	28e5812ec18e0c24b1d7a0ae6ab79d824da96e94
SHA256	d87bf9447e6782b79e37b29b822b72512e49562231a949ab29674648805f5f36
SHA512	f899f117f358d98906c048d8b5a05f50b3c1c6878fb30b0968e370e24f9cc248ff51389480a19c7aee31f66ab37ff282997e3ec07531f404889884898854946a
ImpHash	48aa5c8931746a9655524f67b25a47ef

哈希类型

值

操作

MD5

db63ecc446d79141a12cc1dd13fa377e

SHA1

28e5812ec18e0c24b1d7a0ae6ab79d824da96e94

SHA256

d87bf9447e6782b79e37b29b822b72512e49562231a949ab29674648805f5f36

SHA512

f899f117f358d98906c048d8b5a05f50b3c1c6878fb30b0968e370e24f9cc248ff51389480a19c7aee31f66ab37ff282997e3ec07531f404889884898854946a

ImpHash

48aa5c8931746a9655524f67b25a47ef

PE 分析

基本信息

▼

图标	哈希: 3ac14357e41e58b81174fdc39453fd72 模糊: 19abb6c4c72caad96464db02e175b983 dHash: d48e8688aa06c8d8
映像基址	`0x00400000`
入口点	`0x004113bc`
编译时间	2013-01-30 14:21:56
校验和	0x00000000 (实际: 0x0015b91f)
操作系统版本	5.0
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	5 库 oleaut32, advapi32, user32, kernel32, comctl32
导出	0 函数
资源	19 资源
节	8 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	EA Games
FileDescription	Need for Speed Most Wanted 2005 Setup
FileVersion
LegalCopyright
ProductName	Need for Speed Most Wanted 2005
ProductVersion	1.3
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	61,740 bytes	61,952 bytes	6.39 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`3A126E478661F20816F9D9285615F98E`
`.itext`	`0x00011000`	2,884 bytes	3,072 bytes	5.73 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BA48B9B17B3DD8B92DA3BD93F20DDB34`
`.data`	`0x00012000`	3,208 bytes	3,584 bytes	2.25 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D7FD5F4B562D7961758F3D6A8C834FD0`
`.bss`	`0x00013000`	22,196 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x00019000`	3,536 bytes	3,584 bytes	4.97 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`93D91A2B90E60BD758FC0C4908856AE1`
`.tls`	`0x0001a000`	8 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0001b000`	24 bytes	512 bytes	0.20 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3DFFC444CCC131C9DCEE18DB49EE6403`
`.rsrc`	`0x0001c000`	410,496 bytes	410,624 bytes	6.17 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`6E1430CB693B831FAD3F37A84A80A126`

资源分析

▼

资源总数: 19 (409,346 字节)

资源类型	数量	总大小	百分比
RT_ICON	6	369,968 字节	90.4%
RT_STRING	6	2,668 字节	0.7%
RT_RCDATA	4	33,908 字节	8.3%
RT_GROUP_ICON	1	90 字节	0%
RT_VERSION	1	1,268 字节	0.3%
RT_MANIFEST	1	1,444 字节	0.4%

证书链分析

▼

证书 Information

产品	Need for Speed Most Wanted 2005
描述	Need for Speed Most Wanted 2005 Setup

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.209.174
数据库版本	2025-03-01 05:00:31 UTC

Setup.exe (Need for Speed Most Wanted 2005 Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别