A Análise de Malware do Arquivo binkw32 dll (RAD Video Tools) RAD Game Tools, Inc

Tipo de Hash	Valor	Ação
MD5	245bd2ea9e44300edb396ee6b487730d
SHA1	e7a2670c5e61d3645e39e7e9ba779eea743daee7
SHA256	c6c06e2d21f2179f0b7fbe829a4b17a7b371440d2c679253ec86b64d421185bd
SHA512	7a28df0cd8386b9082f07e53294275dfef995c938c765ac553165348eabc30c4f065ff275a42bfeaa3c07aff2a8e55be99903bd3629be2bd74811ced2ea41fd6
ImpHash	5654872fe1bf46f5b5bfe50e7a2a0fa7

Análise PE

Informações Básicas

▼

Ícone	Hash: 0a90235094a71d415860145540e74628 Fuzzy: e98a80edc16daf72a41c04b1dd054906 dHash: a442f0f0f071724e
Base da Imagem	`0x18000000`
Ponto de Entrada	`0x18005fab`
Tempo de Compilação	2005-01-09 02:53:35
Soma de Verificação	0x00000000 (Real: 0x0005321d)
Versão do SO	4.0
Assinaturas PEiD	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
Caminho PDB	`D:\Devel\projects\bink\build\binkw32.pdb`
Assinatura Digital	No valid SignedData structure was found.
Importações	4 bibliotecas USER32, GDI32, KERNEL32, WINMM
Exportações	86 funções
Recursos	7 Recursos
Seções	36 Seções

Informações de Versão

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.7d
LegalCopyright	Copyright (C) 1994-2005, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.7d
Comments	Thank you for using Bink and Smacker!

Seções PE

▼

Nome	Endereço Virtual	Tamanho Virtual	Tamanho Bruto	Entropia	Características	MD5
`.text`	`0x00001000`	41,698 bytes	41,984 bytes	6.62 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AF07D6E16F22D162C7B866F4C2B141D9`
`BINK`	`0x0000c000`	75,498 bytes	75,776 bytes	6.55 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`4C4CA1163CD842F1A824C17FD627F277`
`BINK16`	`0x0001f000`	6,429 bytes	6,656 bytes	5.97 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`898236C08EC5B44B8D796C6824505310`
`BINK4444`	`0x00021000`	7,375 bytes	7,680 bytes	5.98 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`64EFAA1035E0DC92930B1CC760D8C730`
`BINK5551`	`0x00023000`	7,478 bytes	7,680 bytes	6.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9E8184521CC419F35FD36D9398D7720D`
`BINK32`	`0x00025000`	6,250 bytes	6,656 bytes	5.99 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8B3FCC4DA8F88CC1CD35D84EF4A4C02F`
`BINK32A`	`0x00027000`	7,296 bytes	7,680 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EC61731E262BE6D34BD860CFA64C6C62`
`BINK16X2`	`0x00029000`	3,114 bytes	3,584 bytes	5.64 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`83977241F37B4415C1A55BFDC140B38A`
`BINK32X2`	`0x0002a000`	3,238 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0BF06A1D41E73FDA8E2F84D6DF236B33`
`BINK16MX`	`0x0002b000`	515 bytes	1,024 bytes	3.90 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D4D1A04F3772A768AF75D4B564DCF5D2`
`BINK32MX`	`0x0002c000`	687 bytes	1,024 bytes	4.80 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`282463F845637D531F2CA23B62C9B10D`
`BINK16M`	`0x0002d000`	503 bytes	512 bytes	5.85 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`303D1685AAA31BE4EF53EF56A331E964`
`BINK32M`	`0x0002e000`	547 bytes	1,024 bytes	4.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6EDCCC0CFD5FCA4DFB4DDCCA164529D8`
`BINKYUY2`	`0x0002f000`	361 bytes	512 bytes	4.75 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`47EC0A93605539766E2C379E604747C4`
`BINKYUY2`	`0x00030000`	3,423 bytes	3,584 bytes	5.85 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`92E84793D6AF48D6093FC0DDA1F55BA6`
`BINKYUY2`	`0x00031000`	492 bytes	512 bytes	5.77 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CD4A4C6685E3C93F4D6679A0715AFB53`
`BINKYUY2`	`0x00032000`	292 bytes	512 bytes	4.03 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`048A3EEEA4BB9AF36A8261A403FA40E1`
`BINK32R`	`0x00033000`	5,226 bytes	5,632 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`997867D189294E98CA00D2E6DBC53C04`
`BINK32RA`	`0x00035000`	5,680 bytes	6,144 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`66897139FC047E91120F4056A4FD1DFD`
`BINK32RX`	`0x00037000`	3,238 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`215133C0588C22D88F296E15D51A40EA`
`BINK24`	`0x00038000`	7,350 bytes	7,680 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C860337804AB162B69B57C06939F2099`
`BINK24X2`	`0x0003a000`	4,190 bytes	4,608 bytes	5.94 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9CF5DF78C4E70500143D8577DABE9A76`
`BINK24M`	`0x0003c000`	714 bytes	1,024 bytes	5.01 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`66CE022B36BB298D34A7DD49C5924C7F`
`BINK24R`	`0x0003d000`	6,182 bytes	6,656 bytes	6.00 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`360B3802407370372800CBC41DED7B68`
`BINK24RX`	`0x0003f000`	4,190 bytes	4,608 bytes	5.94 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`77807B1F00185EF0EFB32F46EFF0CA6D`
`BINK24RM`	`0x00041000`	804 bytes	1,024 bytes	5.44 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BCF1E2848C41E59BBD6E0AAF2E087F16`
`BINKUYVY`	`0x00042000`	488 bytes	512 bytes	5.78 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`129DBF0EEE1A850AC7860D4105B8882D`
`BINKUYVY`	`0x00043000`	369 bytes	512 bytes	4.88 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6AC7DC3272A6496637C872A3FCE9F94F`
`BINKUYVY`	`0x00044000`	3,551 bytes	3,584 bytes	5.87 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7B68CD5D691F1123DEAEC1DC534B2925`
`BINKUYVY`	`0x00045000`	327 bytes	512 bytes	4.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AFAFD5508BBEBA5EEB8AFE05587E7ACA`
`BINKYV12`	`0x00046000`	653 bytes	1,024 bytes	4.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7BA9D278AA17FA433FCE6BC360E41F4A`
`.rdata`	`0x00047000`	30,343 bytes	30,720 bytes	6.15 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2E26190581FEDB7BC07ADAFC2D229E9D`
`.data`	`0x0004f000`	4,416 bytes	2,048 bytes	4.65 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B8F33190148A055283338D26A5E93CBD`
`BINKDATA`	`0x00051000`	56,352 bytes	56,832 bytes	3.23 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E2325E416F0FA87F7DBAD76AF1A17A79`
`.rsrc`	`0x0005f000`	8,496 bytes	8,704 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B96E686EACC2D48A05E3F9F958F7B3EF`
`.reloc`	`0x00062000`	21,122 bytes	21,504 bytes	6.67 (Comprimido)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`C357CE868626BDF70BD6CD95080DB8FD`

Alerta de Análise de Entropia

3 seção(ões) com entropia elevada (≥6.5) - possível compressão

Análise de Recursos

▼

Total de Recursos: 7 (8,040 bytes)

Tipo de Recurso	Quantidade	Tamanho Total	Porcentagem
RT_ICON	4	7,008 bytes	87.2%
RT_STRING	1	130 bytes	1.6%
RT_GROUP_ICON	1	62 bytes	0.8%
RT_VERSION	1	840 bytes	10.4%

Análise da Cadeia de Certificados

▼

Certificado Information

Produto	Bink and Smacker
Descrição	RAD Video Tools
Versão do Arquivo	1.7d
Copyright	Copyright (C) 1994-2005, RAD Game Tools, Inc.

✓ Este arquivo foi assinado digitalmente e a cadeia de certificados foi verificada.

A assinatura garante a integridade do arquivo e a autenticidade do editor.
O carimbo de tempo prova quando a assinatura foi aplicada.

Status de Verificação do Certificado

No valid SignedData structure was found.

Recomendação: Verifique a fonte do arquivo e certifique-se de que venha de um editor confiável.

Nome do Arquivo	binkw32.dll
Tipo de Arquivo	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Versão do Scanner	1.0.219.174
Versão do Banco de Dados	2025-07-05 01:00:31 UTC

A Análise do Arquivo binkw32.dll (RAD Video Tools)

Análise Técnica

Arquivo Limpo

Verificar Outro Arquivo

Identificação do Arquivo