Setup exe (Grand Theft Auto III The Definitive Edition Setup) WTD 文件恶意软件分析

Setup.exe (Grand Theft Auto III The Definitive Edition Setup) 文件分析

更新于 2 months ago

检查者 Malware Check

Setup.exe

哈希类型	值	操作
MD5	9d20f017c0a2f182cafa0a966bf4da8c
SHA1	1f1754095c72545ba6fdbb2d25dabdf67f71eef9
SHA256	ff6d6e6f33e1028500bda78a94d17ae99a83bb5a30a5f20997b519bfc703c376
SHA512	f794a761b4d8bd2dc28eca068e65c1d0685d54c28f7a59926920eff3e506368cf782950c84fb142da65236b0556e1ca1d4b73927fa2368827628137611ecb0d3
ImpHash	e569e6f445d32ba23766ad67d1e3787f

哈希类型

值

操作

MD5

9d20f017c0a2f182cafa0a966bf4da8c

SHA1

1f1754095c72545ba6fdbb2d25dabdf67f71eef9

SHA256

ff6d6e6f33e1028500bda78a94d17ae99a83bb5a30a5f20997b519bfc703c376

SHA512

f794a761b4d8bd2dc28eca068e65c1d0685d54c28f7a59926920eff3e506368cf782950c84fb142da65236b0556e1ca1d4b73927fa2368827628137611ecb0d3

ImpHash

e569e6f445d32ba23766ad67d1e3787f

PE 分析

基本信息

▼

图标	哈希: 27fc658a97fe37b83c31836a532e710c 模糊: e17ff46f4c3d994949a3580accf21815 dHash: 069e94d4b1d2e16d
映像基址	`0x00400000`
入口点	`0x004b5eec`
编译时间	2023-02-15 14:54:16
校验和	0x00000000 (实际: 0x004ffc5a)
操作系统版本	6.1
PEiD 签名	`PE32 executable (GUI) Intel 80386, for MS Windows`
数字签名	No valid SignedData structure was found.
导入	7 库 kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
导出	3 函数
资源	23 资源
节	10 节

版本信息

▼

Comments	This installation was built with Inno Setup.
CompanyName	WTD
FileDescription	Grand Theft Auto III The Definitive Edition Setup
FileVersion
LegalCopyright
OriginalFileName
ProductName	Grand Theft Auto III The Definitive Edition
ProductVersion	1.0
Translation	0x0000 0x04b0

PE 节

▼

名称	虚拟地址	虚拟大小	原始大小	熵	特征	MD5
`.text`	`0x00001000`	735,716 bytes	735,744 bytes	6.36 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`43AF0A9476CA224D8E8461F1E22C94DA`
`.itext`	`0x000b5000`	5,768 bytes	6,144 bytes	5.97 (正常)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`185E04B9A1F554E31F7F848515DC890C`
`.data`	`0x000b7000`	14,244 bytes	14,336 bytes	5.05 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CAB2107C933B696AA5CF0CC6C3FD3980`
`.bss`	`0x000bb000`	28,136 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x000c2000`	4,060 bytes	4,096 bytes	5.03 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E7D1635E2624B124CFDCE6C360AC21CD`
`.didata`	`0x000c3000`	420 bytes	512 bytes	2.75 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8CED971D8A7705C98B173E255D8C9AA7`
`.edata`	`0x000c4000`	154 bytes	512 bytes	1.88 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D4E1E508031AFE235BF121C80FD7D5F`
`.tls`	`0x000c5000`	24 bytes	0 bytes	0.00 (正常)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x000c6000`	93 bytes	512 bytes	1.38 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8F2F090ACD9622C88A6A852E72F94E96`
`.rsrc`	`0x000c7000`	139,452 bytes	139,776 bytes	4.94 (正常)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8765FBCB43293C140DDE1AD416DFFAEA`

资源分析

▼

资源总数: 23 (138,128 字节)

资源类型	数量	总大小	百分比
RT_ICON	6	125,858 字节	91.1%
RT_STRING	11	8,040 字节	5.8%
RT_RCDATA	3	768 字节	0.6%
RT_GROUP_ICON	1	90 字节	0.1%
RT_VERSION	1	1,412 字节	1%
RT_MANIFEST	1	1,960 字节	1.4%

证书链分析

▼

证书 Information

产品	Grand Theft Auto III The Definitive Edition
描述	Grand Theft Auto III The Definitive Edition Setup

✓ 此文件已进行数字签名，证书链已验证。

签名确保文件的完整性和发布者的真实性。
时间戳证明签名的应用时间。

证书验证状态

No valid SignedData structure was found.

建议: 验证文件来源并确保它来自可信的发布者.

发表评论

文件名	Setup.exe
文件类型	PE32 executable (GUI) Intel 80386, for MS Windows
扫描器版本	1.0.228.174
数据库版本	2025-11-01 14:00:28 UTC

Setup.exe (Grand Theft Auto III The Definitive Edition Setup) 文件分析

技术分析

干净文件

扫描另一个文件

文件识别