El Análisis de Malware del Archivo binkw32 dll (RAD Video Tools) RAD Game Tools, Inc

Tipo de Hash	Valor	Acción
MD5	245bd2ea9e44300edb396ee6b487730d
SHA1	e7a2670c5e61d3645e39e7e9ba779eea743daee7
SHA256	c6c06e2d21f2179f0b7fbe829a4b17a7b371440d2c679253ec86b64d421185bd
SHA512	7a28df0cd8386b9082f07e53294275dfef995c938c765ac553165348eabc30c4f065ff275a42bfeaa3c07aff2a8e55be99903bd3629be2bd74811ced2ea41fd6
ImpHash	5654872fe1bf46f5b5bfe50e7a2a0fa7

Análisis PE

Información Básica

▼

Icono	Hash: 0a90235094a71d415860145540e74628 Difuso: e98a80edc16daf72a41c04b1dd054906 dHash: a442f0f0f071724e
Base de Imagen	`0x18000000`
Punto de Entrada	`0x18005fab`
Tiempo de Compilación	2005-01-09 02:53:35
Suma de Verificación	0x00000000 (Real: 0x0005321d)
Versión del SO	4.0
Firmas PEiD	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
Ruta PDB	`D:\Devel\projects\bink\build\binkw32.pdb`
Firma Digital	No valid SignedData structure was found.
Importaciones	4 bibliotecas USER32, GDI32, KERNEL32, WINMM
Exportaciones	86 funciones
Recursos	7 Recursos
Secciones	36 Secciones

Información de Versión

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.7d
LegalCopyright	Copyright (C) 1994-2005, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.7d
Comments	Thank you for using Bink and Smacker!

Secciones PE

▼

Nombre	Dirección Virtual	Tamaño Virtual	Tamaño Bruto	Entropía	Características	MD5
`.text`	`0x00001000`	41,698 bytes	41,984 bytes	6.62 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AF07D6E16F22D162C7B866F4C2B141D9`
`BINK`	`0x0000c000`	75,498 bytes	75,776 bytes	6.55 (Comprimido)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`4C4CA1163CD842F1A824C17FD627F277`
`BINK16`	`0x0001f000`	6,429 bytes	6,656 bytes	5.97 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`898236C08EC5B44B8D796C6824505310`
`BINK4444`	`0x00021000`	7,375 bytes	7,680 bytes	5.98 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`64EFAA1035E0DC92930B1CC760D8C730`
`BINK5551`	`0x00023000`	7,478 bytes	7,680 bytes	6.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9E8184521CC419F35FD36D9398D7720D`
`BINK32`	`0x00025000`	6,250 bytes	6,656 bytes	5.99 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8B3FCC4DA8F88CC1CD35D84EF4A4C02F`
`BINK32A`	`0x00027000`	7,296 bytes	7,680 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EC61731E262BE6D34BD860CFA64C6C62`
`BINK16X2`	`0x00029000`	3,114 bytes	3,584 bytes	5.64 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`83977241F37B4415C1A55BFDC140B38A`
`BINK32X2`	`0x0002a000`	3,238 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0BF06A1D41E73FDA8E2F84D6DF236B33`
`BINK16MX`	`0x0002b000`	515 bytes	1,024 bytes	3.90 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D4D1A04F3772A768AF75D4B564DCF5D2`
`BINK32MX`	`0x0002c000`	687 bytes	1,024 bytes	4.80 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`282463F845637D531F2CA23B62C9B10D`
`BINK16M`	`0x0002d000`	503 bytes	512 bytes	5.85 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`303D1685AAA31BE4EF53EF56A331E964`
`BINK32M`	`0x0002e000`	547 bytes	1,024 bytes	4.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6EDCCC0CFD5FCA4DFB4DDCCA164529D8`
`BINKYUY2`	`0x0002f000`	361 bytes	512 bytes	4.75 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`47EC0A93605539766E2C379E604747C4`
`BINKYUY2`	`0x00030000`	3,423 bytes	3,584 bytes	5.85 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`92E84793D6AF48D6093FC0DDA1F55BA6`
`BINKYUY2`	`0x00031000`	492 bytes	512 bytes	5.77 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CD4A4C6685E3C93F4D6679A0715AFB53`
`BINKYUY2`	`0x00032000`	292 bytes	512 bytes	4.03 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`048A3EEEA4BB9AF36A8261A403FA40E1`
`BINK32R`	`0x00033000`	5,226 bytes	5,632 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`997867D189294E98CA00D2E6DBC53C04`
`BINK32RA`	`0x00035000`	5,680 bytes	6,144 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`66897139FC047E91120F4056A4FD1DFD`
`BINK32RX`	`0x00037000`	3,238 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`215133C0588C22D88F296E15D51A40EA`
`BINK24`	`0x00038000`	7,350 bytes	7,680 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C860337804AB162B69B57C06939F2099`
`BINK24X2`	`0x0003a000`	4,190 bytes	4,608 bytes	5.94 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9CF5DF78C4E70500143D8577DABE9A76`
`BINK24M`	`0x0003c000`	714 bytes	1,024 bytes	5.01 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`66CE022B36BB298D34A7DD49C5924C7F`
`BINK24R`	`0x0003d000`	6,182 bytes	6,656 bytes	6.00 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`360B3802407370372800CBC41DED7B68`
`BINK24RX`	`0x0003f000`	4,190 bytes	4,608 bytes	5.94 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`77807B1F00185EF0EFB32F46EFF0CA6D`
`BINK24RM`	`0x00041000`	804 bytes	1,024 bytes	5.44 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BCF1E2848C41E59BBD6E0AAF2E087F16`
`BINKUYVY`	`0x00042000`	488 bytes	512 bytes	5.78 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`129DBF0EEE1A850AC7860D4105B8882D`
`BINKUYVY`	`0x00043000`	369 bytes	512 bytes	4.88 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6AC7DC3272A6496637C872A3FCE9F94F`
`BINKUYVY`	`0x00044000`	3,551 bytes	3,584 bytes	5.87 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7B68CD5D691F1123DEAEC1DC534B2925`
`BINKUYVY`	`0x00045000`	327 bytes	512 bytes	4.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AFAFD5508BBEBA5EEB8AFE05587E7ACA`
`BINKYV12`	`0x00046000`	653 bytes	1,024 bytes	4.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7BA9D278AA17FA433FCE6BC360E41F4A`
`.rdata`	`0x00047000`	30,343 bytes	30,720 bytes	6.15 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2E26190581FEDB7BC07ADAFC2D229E9D`
`.data`	`0x0004f000`	4,416 bytes	2,048 bytes	4.65 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B8F33190148A055283338D26A5E93CBD`
`BINKDATA`	`0x00051000`	56,352 bytes	56,832 bytes	3.23 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E2325E416F0FA87F7DBAD76AF1A17A79`
`.rsrc`	`0x0005f000`	8,496 bytes	8,704 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B96E686EACC2D48A05E3F9F958F7B3EF`
`.reloc`	`0x00062000`	21,122 bytes	21,504 bytes	6.67 (Comprimido)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`C357CE868626BDF70BD6CD95080DB8FD`

Alerta de Análisis de Entropía

3 sección(es) con entropía elevada (≥6.5) - posible compresión

Análisis de Recursos

▼

Total de Recursos: 7 (8,040 bytes)

Tipo de Recurso	Cantidad	Tamaño Total	Porcentaje
RT_ICON	4	7,008 bytes	87.2%
RT_STRING	1	130 bytes	1.6%
RT_GROUP_ICON	1	62 bytes	0.8%
RT_VERSION	1	840 bytes	10.4%

Análisis de la Cadena de Certificados

▼

Certificado Information

Producto	Bink and Smacker
Descripción	RAD Video Tools
Versión del Archivo	1.7d
Copyright	Copyright (C) 1994-2005, RAD Game Tools, Inc.

✓ Este archivo ha sido firmado digitalmente y la cadena de certificados ha sido verificada.

La firma garantiza la integridad del archivo y la autenticidad del editor.
La marca de tiempo demuestra cuándo se aplicó la firma.

Estado de Verificación del Certificado

No valid SignedData structure was found.

Recomendación: Verifique la fuente del archivo y asegúrese de que provenga de un editor confiable.

Nombre del Archivo	binkw32.dll
Tipo de Archivo	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Versión del Escáner	1.0.219.174
Versión de la Base de Datos	2025-07-05 01:00:31 UTC

El Análisis del Archivo binkw32.dll (RAD Video Tools)

Análisis Técnico

Archivo Limpio

Escanear Otro Archivo

Identificación del Archivo