A Análise de Malware do Arquivo BinkW32 DLL (RAD Video Tools) RAD Game Tools, Inc

Tipo de Hash	Valor	Ação
MD5	002cdf612509807b33e4ab09c686a966
SHA1	73a2ee8ec4c074b6a5c5485c615ee7ce230137e0
SHA256	2d0ae23a6175dc7b635c402a5e7e9542e923c0d1c376a8c5ef876ca0d5959d23
SHA512	e6d1c3f5e33ff8fc56b4798a6155ae76411ba9a234bea599338b7af424051943b1a2e666baa6935975df3d0354ba435962d1281b88b1ea17a77b1fbeb2cecca2
ImpHash	863844ad7aa759748e31329c65f10f35

Análise PE

Informações Básicas

▼

Ícone	Hash: 0a90235094a71d415860145540e74628 Fuzzy: e98a80edc16daf72a41c04b1dd054906 dHash: a442f0f0f071724e
Base da Imagem	`0x30000000`
Ponto de Entrada	`0x30006ab1`
Tempo de Compilação	2003-04-17 02:19:57
Soma de Verificação	0x00000000 (Real: 0x0005be16)
Versão do SO	4.0
Assinaturas PEiD	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
Caminho PDB	`D:\Devel\Projects\bink\build\binkw32.pdb`
Assinatura Digital	No valid SignedData structure was found.
Importações	4 bibliotecas USER32, GDI32, KERNEL32, WINMM
Exportações	85 funções
Recursos	7 Recursos
Seções	36 Seções

Informações de Versão

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.5v
LegalCopyright	Copyright (C) 1994-2003, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.5v
Comments	Thank you for using Bink and Smacker!

Seções PE

▼

Nome	Endereço Virtual	Tamanho Virtual	Tamanho Bruto	Entropia	Características	MD5
`.text`	`0x00001000`	54,512 bytes	54,784 bytes	6.68 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F5931B146C87797572D249BF434B9F3`
`BINK`	`0x0000f000`	77,210 bytes	77,312 bytes	6.59 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B353CD0FAEEA3C0CD2D0DAECE4F2F7E2`
`BINK16`	`0x00022000`	6,429 bytes	6,656 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E95FB9E50E548F7390D29BB6C0ED9220`
`BINK4444`	`0x00024000`	7,375 bytes	7,680 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`114B8B3BFD027CAEB152A9B2154D70C0`
`BINK5551`	`0x00026000`	6,374 bytes	6,656 bytes	6.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F95BFF63B08CC0DD134CC3C76E3A5B9`
`BINK32`	`0x00028000`	6,250 bytes	6,656 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6B3317A45F9B7BA4C62023321092F7AB`
`BINK32A`	`0x0002a000`	7,360 bytes	7,680 bytes	6.12 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F2F9E4C8DA9860C301F61F11313E38DF`
`BINK16X2`	`0x0002c000`	3,114 bytes	3,584 bytes	5.73 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AD02BD1BA2FD31896F1B9BC43E77B8A8`
`BINK32X2`	`0x0002d000`	3,238 bytes	3,584 bytes	5.95 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`405C5B7AD2F5F6DB1838AD24AE9474E0`
`BINK16MX`	`0x0002e000`	515 bytes	1,024 bytes	3.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E2F414312A7F6EBE68A467B404567618`
`BINK32MX`	`0x0002f000`	687 bytes	1,024 bytes	4.82 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C1F17F181316B82834FA5CB16EECCDED`
`BINK16M`	`0x00030000`	503 bytes	512 bytes	5.83 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B4C9B4D7F4331AB02F0C306580308554`
`BINK32M`	`0x00031000`	547 bytes	1,024 bytes	4.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D148D14435E2178CD4504B40E92806E6`
`BINKYUY2`	`0x00032000`	361 bytes	512 bytes	4.78 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`025BE532C4886B1B22B02390E4AADD46`
`BINKYUY2`	`0x00033000`	3,455 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2FB150521E1A9CE7C31F6CE5F065A3FF`
`BINKYUY2`	`0x00034000`	492 bytes	512 bytes	5.73 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DB342C40740D86199B5C4C1CC634B5A8`
`BINKYUY2`	`0x00035000`	292 bytes	512 bytes	4.05 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`72C481A56E618C7981CABBD51FC37AA4`
`BINK32R`	`0x00036000`	5,226 bytes	5,632 bytes	6.07 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D819C9EA61C20B2193457A0064FDB2D8`
`BINK32RA`	`0x00038000`	5,696 bytes	6,144 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DC26195EAB4ADE20B1E54B978CDD743B`
`BINK32RX`	`0x0003a000`	3,238 bytes	3,584 bytes	5.95 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F0DA84CC064542C2E07203D31F50D237`
`BINK24`	`0x0003b000`	7,350 bytes	7,680 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`30483EF005C4D6BE2E496E99AAF03207`
`BINK24X2`	`0x0003d000`	4,190 bytes	4,608 bytes	6.01 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`35B9B5364AE0A6EEE152CCBC4558544E`
`BINK24M`	`0x0003f000`	714 bytes	1,024 bytes	5.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BB93AB16735EBBEAC01D89CC4ACED61F`
`BINK24R`	`0x00040000`	6,182 bytes	6,656 bytes	6.08 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8C33C21C3C2E33A6BA26F35937B5CB60`
`BINK24RX`	`0x00042000`	4,190 bytes	4,608 bytes	6.01 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C7926EA27FFC0F88F5E745F37E08FAE8`
`BINK24RM`	`0x00044000`	804 bytes	1,024 bytes	5.47 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`95D23863439C3AE527ABA10D47854B27`
`BINKUYVY`	`0x00045000`	488 bytes	512 bytes	5.76 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2DB773CB12DA6F00FDCBB0F3F0EDF4C3`
`BINKUYVY`	`0x00046000`	369 bytes	512 bytes	4.92 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`68B20821243E8B91A5BDED471D7BDDF8`
`BINKUYVY`	`0x00047000`	3,599 bytes	4,096 bytes	5.60 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DC33D39A0CAE1B221A94E31375624246`
`BINKUYVY`	`0x00048000`	327 bytes	512 bytes	4.22 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2016B4C70AF003CD30A8080468828CDB`
`BINKYV12`	`0x00049000`	704 bytes	1,024 bytes	4.67 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EAAA12586820D12D502BD723B8542523`
`.rdata`	`0x0004a000`	44,823 bytes	45,056 bytes	6.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8B6CA0009D69C45A44BE2B4905718D3C`
`.data`	`0x00055000`	13,412 bytes	2,560 bytes	5.14 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`96E5000E37961CCA17E0F3F0299BC74B`
`BINKDATA`	`0x00059000`	64,688 bytes	65,024 bytes	2.73 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A18666F192A335EF1D1B33C073F8B29F`
`.rsrc`	`0x00069000`	8,496 bytes	8,704 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`03EE5487E367143927041639D05D1B10`
`.reloc`	`0x0006c000`	21,348 bytes	21,504 bytes	6.67 (Comprimido)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`CBFB939A7C16BB9C70BB8FE031589D1F`

Alerta de Análise de Entropia

3 seção(ões) com entropia elevada (≥6.5) - possível compressão

Análise de Recursos

▼

Total de Recursos: 7 (8,040 bytes)

Tipo de Recurso	Quantidade	Tamanho Total	Porcentagem
RT_ICON	4	7,008 bytes	87.2%
RT_STRING	1	130 bytes	1.6%
RT_GROUP_ICON	1	62 bytes	0.8%
RT_VERSION	1	840 bytes	10.4%

Análise da Cadeia de Certificados

▼

Certificado Information

Produto	Bink and Smacker
Descrição	RAD Video Tools
Versão do Arquivo	1.5v
Copyright	Copyright (C) 1994-2003, RAD Game Tools, Inc.

✓ Este arquivo foi assinado digitalmente e a cadeia de certificados foi verificada.

A assinatura garante a integridade do arquivo e a autenticidade do editor.
O carimbo de tempo prova quando a assinatura foi aplicada.

Status de Verificação do Certificado

No valid SignedData structure was found.

Recomendação: Verifique a fonte do arquivo e certifique-se de que venha de um editor confiável.

Nome do Arquivo	BinkW32.DLL
Tipo de Arquivo	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Versão do Scanner	1.0.211.174
Versão do Banco de Dados	2025-03-19 08:00:28 UTC

A Análise do Arquivo BinkW32.DLL (RAD Video Tools)

Análise Técnica

Arquivo Limpo

Verificar Outro Arquivo

Identificação do Arquivo