db9a522454ca3699b21332171dccadbc
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2011-Oct-11 22:56:06 |
| Detected languages |
English - United States
|
| Debug artifacts |
C:\devel\projects\bink\build\binkw32.pdb
|
| CompanyName | RAD Game Tools, Inc. |
| FileDescription | RAD Video Tools |
| FileVersion | 1.99m |
| LegalCopyright | Copyright (C) 1994-2011, RAD Game Tools, Inc. |
| LegalTrademarks | Bink and Smacker are trademarks of RAD Game Tools, Inc. |
| ProductName | Bink and Smacker |
| ProductVersion | 1.99m |
| Comments | Thank you for using Bink and Smacker! |
Plugin Output
| Info | Matching compiler(s): | Microsoft Visual C++ 6.0 - 8.0 |
| Suspicious | The PE is possibly packed. |
Unusual section name found: BINKY12
Unusual section name found: BINKY16 Unusual section name found: BINKP8 Unusual section name found: BINK16 Unusual section name found: BINK32 Unusual section name found: BINK Unusual section name found: RADCODE Unusual section name found: BINKBSS Unusual section name found: BINKCONS Unusual section name found: BINKDATA Unusual section name found: RADDATA Unusual section name found: RADCONST |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Suspicious | VirusTotal score: 1/66 (Scanned on 2021-02-11 20:55:35) | APEX: Malicious |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xe0 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 17 |
| TimeDateStamp | 2011-Oct-11 22:56:06 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 9.0 |
| SizeOfCode | 0x22400 |
| SizeOfInitializedData | 0x14a00 |
| SizeOfUninitializedData | 0x8c00 |
| AddressOfEntryPoint | 0x000024D0 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x28000 |
| ImageBase | 0x10000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x49000 |
| SizeOfHeaders | 0x600 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
BINKY12
BINKY16
BINKP8
BINK16
BINK32
BINK
RADCODE
BINKBSS
.rdata
.data
BINKCONS
BINKDATA
RADDATA
RADCONST
.rsrc
.reloc
Imports
| USER32.dll |
GetTopWindow
GetWindowLongA GetActiveWindow GetWindowThreadProcessId GetWindow EndPaint ClientToScreen DestroyWindow SetCursor ScreenToClient GetWindowRect IsIconic GetClientRect BeginPaint GetDC ShowCursor UnregisterClassA CreateWindowExA PeekMessageA ReleaseDC DefWindowProcA GetCursorPos GetSystemMetrics IsWindowVisible ChangeDisplaySettingsA GetClassLongA RegisterClassA MessageBoxA |
|---|---|
| GDI32.dll |
CreateDIBSection
GetDeviceCaps StretchBlt GetDIBits SetPixel DeleteObject SelectObject CreateCompatibleDC CreateCompatibleBitmap SetStretchBltMode GetPixel DeleteDC |
| KERNEL32.dll |
EnterCriticalSection
RaiseException ReleaseSemaphore SetThreadPriority CreateSemaphoreA LeaveCriticalSection InitializeCriticalSection GetCurrentThread WaitForSingleObject SetUnhandledExceptionFilter TlsGetValue HeapCreate HeapFree GetThreadPriority CreateMutexA DeleteCriticalSection SetThreadAffinityMask ReleaseMutex TlsAlloc ResumeThread CreateThread LocalAlloc TlsSetValue SetFilePointer GetWindowsDirectoryA GetSystemDirectoryA GetModuleFileNameA SetErrorMode FreeLibrary GetProcAddress LoadLibraryA GetModuleHandleA Sleep GetSystemInfo GetCurrentProcessId OutputDebugStringA QueryPerformanceCounter GetTickCount GetEnvironmentVariableA QueryPerformanceFrequency CreateFileA InterlockedExchange ReadFile GetLastError CloseHandle TerminateProcess GetCurrentProcess DisableThreadLibraryCalls HeapAlloc |
| WINMM.dll |
waveOutSetVolume
waveOutReset waveOutRestart waveOutPause waveOutWrite waveOutClose timeGetTime timeEndPeriod timeBeginPeriod waveOutPrepareHeader waveOutOpen waveOutUnprepareHeader |
| ole32.dll |
CoCreateInstance
CoInitializeEx |
| mss32.dll (delay-loaded) |
_AIL_mem_alloc_lock_info@12
_AIL_release_sample_handle@4 _AIL_minimum_sample_buffer_size@12 _AIL_load_sample_buffer@16 _AIL_sample_user_data@8 _AIL_register_EOB_callback@8 _AIL_digital_latency@4 _AIL_mem_free_lock@4 _AIL_set_sample_user_data@12 _AIL_set_sample_playback_rate@8 _AIL_sample_buffer_available@4 _AIL_stop_sample@4 _AIL_init_sample@8 _AIL_allocate_sample_handle@4 _AIL_resume_sample@4 _AIL_set_sample_buffer_count@8 _AIL_set_sample_volume_pan@12 _AIL_set_sample_channel_levels@20 _AIL_sample_buffer_info@24 |
Delayed Imports
| Attributes | 0x1 |
|---|---|
| Name | mss32.dll |
| ModuleHandle | 0x36a8c |
| DelayImportAddressTable | 0x36a30 |
| DelayImportNameTable | 0x31378 |
| BoundDelayImportTable | 0x31604 |
| UnloadDelayImportTable | 0 |
| TimeStamp | 1970-Jan-01 00:00:00 |
_BinkBufferBlit@12
| Ordinal | 1 |
|---|---|
| Address | 0xc2c0 |
_BinkBufferCheckWinPos@12
| Ordinal | 2 |
|---|---|
| Address | 0xafd0 |
_BinkBufferClear@8
| Ordinal | 3 |
|---|---|
| Address | 0xca70 |
_BinkBufferClose@4
| Ordinal | 4 |
|---|---|
| Address | 0xc010 |
_BinkBufferGetDescription@4
| Ordinal | 5 |
|---|---|
| Address | 0xc830 |
_BinkBufferGetError@0
| Ordinal | 6 |
|---|---|
| Address | 0xca60 |
_BinkBufferLock@4
| Ordinal | 7 |
|---|---|
| Address | 0xc120 |
_BinkBufferOpen@16
| Ordinal | 8 |
|---|---|
| Address | 0xb5e0 |
_BinkBufferSetDirectDraw@8
| Ordinal | 9 |
|---|---|
| Address | 0xa910 |
_BinkBufferSetHWND@8
| Ordinal | 10 |
|---|---|
| Address | 0xc820 |
_BinkBufferSetOffset@12
| Ordinal | 11 |
|---|---|
| Address | 0xb080 |
_BinkBufferSetResolution@12
| Ordinal | 12 |
|---|---|
| Address | 0xae20 |
_BinkBufferSetScale@12
| Ordinal | 13 |
|---|---|
| Address | 0xc710 |
_BinkBufferUnlock@4
| Ordinal | 14 |
|---|---|
| Address | 0xc240 |
_BinkCheckCursor@20
| Ordinal | 15 |
|---|---|
| Address | 0xad40 |
_BinkClose@4
| Ordinal | 16 |
|---|---|
| Address | 0x11ec0 |
_BinkCloseTrack@4
| Ordinal | 17 |
|---|---|
| Address | 0x138b0 |
_BinkControlBackgroundIO@8
| Ordinal | 18 |
|---|---|
| Address | 0x13c40 |
_BinkControlPlatformFeatures@8
| Ordinal | 19 |
|---|---|
| Address | 0x1d160 |
_BinkCopyToBuffer@28
| Ordinal | 20 |
|---|---|
| Address | 0x10910 |
_BinkCopyToBufferRect@44
| Ordinal | 21 |
|---|---|
| Address | 0x10950 |
_BinkDDSurfaceType@4
| Ordinal | 22 |
|---|---|
| Address | 0xcac0 |
_BinkDX8SurfaceType@4
| Ordinal | 23 |
|---|---|
| Address | 0xcca0 |
_BinkDX9SurfaceType@4
| Ordinal | 24 |
|---|---|
| Address | 0xcd90 |
_BinkDoFrame@4
| Ordinal | 25 |
|---|---|
| Address | 0x118a0 |
_BinkDoFrameAsync@12
| Ordinal | 26 |
|---|---|
| Address | 0x16ba0 |
_BinkDoFrameAsyncWait@8
| Ordinal | 27 |
|---|---|
| Address | 0x16d70 |
_BinkDoFramePlane@8
| Ordinal | 28 |
|---|---|
| Address | 0x11300 |
_BinkFreeGlobals@0
| Ordinal | 29 |
|---|---|
| Address | 0x11df0 |
_BinkGetError@0
| Ordinal | 30 |
|---|---|
| Address | 0xd170 |
_BinkGetFrameBuffersInfo@8
| Ordinal | 31 |
|---|---|
| Address | 0xf2b0 |
_BinkGetKeyFrame@12
| Ordinal | 32 |
|---|---|
| Address | 0x11a90 |
_BinkGetPalette@4
| Ordinal | 33 |
|---|---|
| Address | 0x1e4e0 |
_BinkGetPlatformInfo@8
| Ordinal | 34 |
|---|---|
| Address | 0x12360 |
_BinkGetRealtime@12
| Ordinal | 35 |
|---|---|
| Address | 0x128d0 |
_BinkGetRects@8
| Ordinal | 36 |
|---|---|
| Address | 0x12d40 |
_BinkGetSummary@8
| Ordinal | 37 |
|---|---|
| Address | 0x126f0 |
_BinkGetTrackData@8
| Ordinal | 38 |
|---|---|
| Address | 0x138f0 |
_BinkGetTrackID@8
| Ordinal | 39 |
|---|---|
| Address | 0x136a0 |
_BinkGetTrackMaxSize@8
| Ordinal | 40 |
|---|---|
| Address | 0x13670 |
_BinkGetTrackType@8
| Ordinal | 41 |
|---|---|
| Address | 0x13650 |
_BinkGoto@12
| Ordinal | 42 |
|---|---|
| Address | 0x11b70 |
_BinkIsSoftwareCursor@8
| Ordinal | 43 |
|---|---|
| Address | 0xaa10 |
_BinkLogoAddress@0
| Ordinal | 44 |
|---|---|
| Address | 0x1000 |
_BinkNextFrame@4
| Ordinal | 45 |
|---|---|
| Address | 0x11920 |
_BinkOpen@8
| Ordinal | 46 |
|---|---|
| Address | 0x10710 |
_BinkOpenDirectSound@4
| Ordinal | 47 |
|---|---|
| Address | 0x15360 |
_BinkOpenMiles@4
| Ordinal | 48 |
|---|---|
| Address | 0x15b60 |
_BinkOpenTrack@8
| Ordinal | 49 |
|---|---|
| Address | 0x136c0 |
_BinkOpenWaveOut@4
| Ordinal | 50 |
|---|---|
| Address | 0x14540 |
_BinkOpenWithOptions@12
| Ordinal | 51 |
|---|---|
| Address | 0x107b0 |
_BinkOpenXAudio2@4
| Ordinal | 52 |
|---|---|
| Address | 0x17720 |
_BinkPause@8
| Ordinal | 53 |
|---|---|
| Address | 0x12560 |
_BinkRegisterFrameBuffers@8
| Ordinal | 54 |
|---|---|
| Address | 0xf370 |
_BinkRequestStopAsyncThread@4
| Ordinal | 55 |
|---|---|
| Address | 0x16a20 |
_BinkRestoreCursor@4
| Ordinal | 56 |
|---|---|
| Address | 0xadf0 |
_BinkService@4
| Ordinal | 57 |
|---|---|
| Address | 0x13110 |
_BinkSetError@4
| Ordinal | 58 |
|---|---|
| Address | 0xd130 |
_BinkSetFileOffset@8
| Ordinal | 59 |
|---|---|
| Address | 0xe550 |
_BinkSetFrameRate@8
| Ordinal | 60 |
|---|---|
| Address | 0xe530 |
_BinkSetIO@4
| Ordinal | 61 |
|---|---|
| Address | 0xe580 |
_BinkSetIOSize@4
| Ordinal | 62 |
|---|---|
| Address | 0xe570 |
_BinkSetMemory@8
| Ordinal | 63 |
|---|---|
| Address | 0x13bf0 |
_BinkSetPan@12
| Ordinal | 64 |
|---|---|
| Address | 0x135f0 |
_BinkSetSimulate@4
| Ordinal | 65 |
|---|---|
| Address | 0xe590 |
_BinkSetSoundOnOff@8
| Ordinal | 66 |
|---|---|
| Address | 0x13a40 |
_BinkSetSoundSystem@8
| Ordinal | 67 |
|---|---|
| Address | 0xd660 |
_BinkSetSoundTrack@8
| Ordinal | 68 |
|---|---|
| Address | 0xe5a0 |
_BinkSetSpeakerVolumes@20
| Ordinal | 69 |
|---|---|
| Address | 0x13200 |
_BinkSetVideoOnOff@8
| Ordinal | 70 |
|---|---|
| Address | 0x13a20 |
_BinkSetVolume@12
| Ordinal | 71 |
|---|---|
| Address | 0x131a0 |
_BinkSetWillLoop@8
| Ordinal | 72 |
|---|---|
| Address | 0x13c10 |
_BinkShouldSkip@4
| Ordinal | 73 |
|---|---|
| Address | 0x118c0 |
_BinkStartAsyncThread@8
| Ordinal | 74 |
|---|---|
| Address | 0x16a00 |
_BinkWait@4
| Ordinal | 75 |
|---|---|
| Address | 0x123e0 |
_BinkWaitStopAsyncThread@4
| Ordinal | 76 |
|---|---|
| Address | 0x16a30 |
_RADTimerRead@0
| Ordinal | 77 |
|---|---|
| Address | 0x15bd0 |
1
2
3
4
5
6
3 (#2)
101
1 (#2)
String Table contents
| 1.99m |
| Copyright (C) 1994-2011, RAD Game Tools, Inc. |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.9.99.0 |
| ProductVersion | 1.9.99.0 |
| FileFlags | (EMPTY) |
| FileOs | (EMPTY) |
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | RAD Game Tools, Inc. |
| FileDescription | RAD Video Tools |
| FileVersion (#2) | 1.99m |
| LegalCopyright | Copyright (C) 1994-2011, RAD Game Tools, Inc. |
| LegalTrademarks | Bink and Smacker are trademarks of RAD Game Tools, Inc. |
| ProductName | Bink and Smacker |
| ProductVersion (#2) | 1.99m |
| Comments | Thank you for using Bink and Smacker! |
| Resource LangID | English - United States |
|---|
IMAGE_DEBUG_TYPE_CODEVIEW
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2011-Oct-11 22:56:06 |
| Version | 0.0 |
| SizeofData | 65 |
| AddressOfRawData | 0x32944 |
| PointerToRawData | 0x24344 |
| Referenced File | C:\devel\projects\bink\build\binkw32.pdb |
TLS Callbacks
Load Configuration
| Size | 0x48 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x10033000 |
| SEHandlerTable | 0 |
| SEHandlerCount | 0 |
RICH Header
Errors
[*] Warning: Section BINKBSS has a size of 0!