El Análisis de Malware del Archivo BinkW32 DLL (RAD Video Tools) RAD Game Tools, Inc

Tipo de Hash	Valor	Acción
MD5	002cdf612509807b33e4ab09c686a966
SHA1	73a2ee8ec4c074b6a5c5485c615ee7ce230137e0
SHA256	2d0ae23a6175dc7b635c402a5e7e9542e923c0d1c376a8c5ef876ca0d5959d23
SHA512	e6d1c3f5e33ff8fc56b4798a6155ae76411ba9a234bea599338b7af424051943b1a2e666baa6935975df3d0354ba435962d1281b88b1ea17a77b1fbeb2cecca2
ImpHash	863844ad7aa759748e31329c65f10f35

Análisis PE

Información Básica

▼

Icono	Hash: 0a90235094a71d415860145540e74628 Difuso: e98a80edc16daf72a41c04b1dd054906 dHash: a442f0f0f071724e
Base de Imagen	`0x30000000`
Punto de Entrada	`0x30006ab1`
Tiempo de Compilación	2003-04-17 02:19:57
Suma de Verificación	0x00000000 (Real: 0x0005be16)
Versión del SO	4.0
Firmas PEiD	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
Ruta PDB	`D:\Devel\Projects\bink\build\binkw32.pdb`
Firma Digital	No valid SignedData structure was found.
Importaciones	4 bibliotecas USER32, GDI32, KERNEL32, WINMM
Exportaciones	85 funciones
Recursos	7 Recursos
Secciones	36 Secciones

Información de Versión

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.5v
LegalCopyright	Copyright (C) 1994-2003, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.5v
Comments	Thank you for using Bink and Smacker!

Secciones PE

▼

Nombre	Dirección Virtual	Tamaño Virtual	Tamaño Bruto	Entropía	Características	MD5
`.text`	`0x00001000`	54,512 bytes	54,784 bytes	6.68 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F5931B146C87797572D249BF434B9F3`
`BINK`	`0x0000f000`	77,210 bytes	77,312 bytes	6.59 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B353CD0FAEEA3C0CD2D0DAECE4F2F7E2`
`BINK16`	`0x00022000`	6,429 bytes	6,656 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E95FB9E50E548F7390D29BB6C0ED9220`
`BINK4444`	`0x00024000`	7,375 bytes	7,680 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`114B8B3BFD027CAEB152A9B2154D70C0`
`BINK5551`	`0x00026000`	6,374 bytes	6,656 bytes	6.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7F95BFF63B08CC0DD134CC3C76E3A5B9`
`BINK32`	`0x00028000`	6,250 bytes	6,656 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6B3317A45F9B7BA4C62023321092F7AB`
`BINK32A`	`0x0002a000`	7,360 bytes	7,680 bytes	6.12 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F2F9E4C8DA9860C301F61F11313E38DF`
`BINK16X2`	`0x0002c000`	3,114 bytes	3,584 bytes	5.73 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AD02BD1BA2FD31896F1B9BC43E77B8A8`
`BINK32X2`	`0x0002d000`	3,238 bytes	3,584 bytes	5.95 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`405C5B7AD2F5F6DB1838AD24AE9474E0`
`BINK16MX`	`0x0002e000`	515 bytes	1,024 bytes	3.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E2F414312A7F6EBE68A467B404567618`
`BINK32MX`	`0x0002f000`	687 bytes	1,024 bytes	4.82 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C1F17F181316B82834FA5CB16EECCDED`
`BINK16M`	`0x00030000`	503 bytes	512 bytes	5.83 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B4C9B4D7F4331AB02F0C306580308554`
`BINK32M`	`0x00031000`	547 bytes	1,024 bytes	4.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D148D14435E2178CD4504B40E92806E6`
`BINKYUY2`	`0x00032000`	361 bytes	512 bytes	4.78 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`025BE532C4886B1B22B02390E4AADD46`
`BINKYUY2`	`0x00033000`	3,455 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2FB150521E1A9CE7C31F6CE5F065A3FF`
`BINKYUY2`	`0x00034000`	492 bytes	512 bytes	5.73 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DB342C40740D86199B5C4C1CC634B5A8`
`BINKYUY2`	`0x00035000`	292 bytes	512 bytes	4.05 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`72C481A56E618C7981CABBD51FC37AA4`
`BINK32R`	`0x00036000`	5,226 bytes	5,632 bytes	6.07 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D819C9EA61C20B2193457A0064FDB2D8`
`BINK32RA`	`0x00038000`	5,696 bytes	6,144 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DC26195EAB4ADE20B1E54B978CDD743B`
`BINK32RX`	`0x0003a000`	3,238 bytes	3,584 bytes	5.95 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`F0DA84CC064542C2E07203D31F50D237`
`BINK24`	`0x0003b000`	7,350 bytes	7,680 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`30483EF005C4D6BE2E496E99AAF03207`
`BINK24X2`	`0x0003d000`	4,190 bytes	4,608 bytes	6.01 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`35B9B5364AE0A6EEE152CCBC4558544E`
`BINK24M`	`0x0003f000`	714 bytes	1,024 bytes	5.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BB93AB16735EBBEAC01D89CC4ACED61F`
`BINK24R`	`0x00040000`	6,182 bytes	6,656 bytes	6.08 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8C33C21C3C2E33A6BA26F35937B5CB60`
`BINK24RX`	`0x00042000`	4,190 bytes	4,608 bytes	6.01 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C7926EA27FFC0F88F5E745F37E08FAE8`
`BINK24RM`	`0x00044000`	804 bytes	1,024 bytes	5.47 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`95D23863439C3AE527ABA10D47854B27`
`BINKUYVY`	`0x00045000`	488 bytes	512 bytes	5.76 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2DB773CB12DA6F00FDCBB0F3F0EDF4C3`
`BINKUYVY`	`0x00046000`	369 bytes	512 bytes	4.92 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`68B20821243E8B91A5BDED471D7BDDF8`
`BINKUYVY`	`0x00047000`	3,599 bytes	4,096 bytes	5.60 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`DC33D39A0CAE1B221A94E31375624246`
`BINKUYVY`	`0x00048000`	327 bytes	512 bytes	4.22 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2016B4C70AF003CD30A8080468828CDB`
`BINKYV12`	`0x00049000`	704 bytes	1,024 bytes	4.67 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EAAA12586820D12D502BD723B8542523`
`.rdata`	`0x0004a000`	44,823 bytes	45,056 bytes	6.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8B6CA0009D69C45A44BE2B4905718D3C`
`.data`	`0x00055000`	13,412 bytes	2,560 bytes	5.14 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`96E5000E37961CCA17E0F3F0299BC74B`
`BINKDATA`	`0x00059000`	64,688 bytes	65,024 bytes	2.73 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A18666F192A335EF1D1B33C073F8B29F`
`.rsrc`	`0x00069000`	8,496 bytes	8,704 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`03EE5487E367143927041639D05D1B10`
`.reloc`	`0x0006c000`	21,348 bytes	21,504 bytes	6.67 (Comprimido)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`CBFB939A7C16BB9C70BB8FE031589D1F`

Alerta de Análisis de Entropía

3 sección(es) con entropía elevada (≥6.5) - posible compresión

Análisis de Recursos

▼

Total de Recursos: 7 (8,040 bytes)

Tipo de Recurso	Cantidad	Tamaño Total	Porcentaje
RT_ICON	4	7,008 bytes	87.2%
RT_STRING	1	130 bytes	1.6%
RT_GROUP_ICON	1	62 bytes	0.8%
RT_VERSION	1	840 bytes	10.4%

Análisis de la Cadena de Certificados

▼

Certificado Information

Producto	Bink and Smacker
Descripción	RAD Video Tools
Versión del Archivo	1.5v
Copyright	Copyright (C) 1994-2003, RAD Game Tools, Inc.

✓ Este archivo ha sido firmado digitalmente y la cadena de certificados ha sido verificada.

La firma garantiza la integridad del archivo y la autenticidad del editor.
La marca de tiempo demuestra cuándo se aplicó la firma.

Estado de Verificación del Certificado

No valid SignedData structure was found.

Recomendación: Verifique la fuente del archivo y asegúrese de que provenga de un editor confiable.

Nombre del Archivo	BinkW32.DLL
Tipo de Archivo	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Versión del Escáner	1.0.211.174
Versión de la Base de Datos	2025-03-19 08:00:28 UTC

El Análisis del Archivo BinkW32.DLL (RAD Video Tools)

Análisis Técnico

Archivo Limpio

Escanear Otro Archivo

Identificación del Archivo