The bink2w64 dll (RAD Video Tools) RAD Game Tools, Inc File Malware Analysis

The bink2w64.dll (RAD Video Tools) File Analysis

Updated 2 months ago

Checked by Malaware Check

bink2w64.dll

Hash Type	Value	Action
MD5	cec7908cbc7b510c9a0f8f0a67315ab7
SHA1	1c09849a1c63f6c237ae85830d9ef214ae62c96e
SHA256	4abcf0c7bb070a01bb86a35640d5e3ef5bcb43a59d99b8f5ba57d56011e4d17b
SHA512	1effe3a30a6afa2566df7b349be3e98085081d4950d20ae0c690ae45df0acb6b64d63b1f93ac9a161d6c53dc98b16c60a4b9a7c8bd84b253100398f95a970bbb
ImpHash	6b35d3999e2a065212609a92b090406a

Hash Type

Value

Action

MD5

cec7908cbc7b510c9a0f8f0a67315ab7

SHA1

1c09849a1c63f6c237ae85830d9ef214ae62c96e

SHA256

4abcf0c7bb070a01bb86a35640d5e3ef5bcb43a59d99b8f5ba57d56011e4d17b

SHA512

1effe3a30a6afa2566df7b349be3e98085081d4950d20ae0c690ae45df0acb6b64d63b1f93ac9a161d6c53dc98b16c60a4b9a7c8bd84b253100398f95a970bbb

ImpHash

6b35d3999e2a065212609a92b090406a

PE Analysis

Basic Information

▼

Icon	Hash: b74bb882057510e2a64a1daa816a923f Fuzzy: fcf85538e11f47955db5db4303037e3a dHash: 5a44f0f07031b0c8
Image Base	`0x180000000`
Entry Point	`0x180003a78`
Compilation Time	2014-04-08 05:29:10
Checksum	0x00000000 (Actual: 0x0006c9b3)
OS Version	5.2
PEiD Signatures	`PE32+ executable (DLL) (GUI) x86-64, for MS Windows`
PDB Path	`C:\devel\projects\bink\build\bink2w64.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries USER32, GDI32, KERNEL32, WINMM, ole32
Exports	83 functions
Resources	9 Resources
Sections	16 Sections

Version Information

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.994d
LegalCopyright	Copyright (C) 1994-2014, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.994d
Comments	Thank you for using RAD Game Tools!
Translation	0x0409 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	57,273 bytes	57,344 bytes	6.56 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`71BA24737D75033545551760E23703CE`
`BINK16`	`0x0000f000`	2,351 bytes	2,560 bytes	5.84 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8D2FB983E44CDED01ABA7D1D6F421446`
`BINK32`	`0x00010000`	2,949 bytes	3,072 bytes	6.05 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8D5C504377D3629F3C59DF7265A70704`
`BINKP8`	`0x00011000`	2,663 bytes	3,072 bytes	5.75 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A8C7E5B4BFC8C589241E23D18E3DF0FD`
`BINK`	`0x00012000`	239,335 bytes	239,616 bytes	6.46 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`587FC3749D4B18C459673B4FEBE18F80`
`RADCODE`	`0x0004d000`	1,932 bytes	2,048 bytes	5.86 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A3CDC0167BD564A18484884F67CB2167`
`BINKBSS`	`0x0004e000`	107,456 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00069000`	28,438 bytes	28,672 bytes	5.84 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4A8EC578EE531BBAA7FE1A45EAEBE241`
`.data`	`0x00070000`	26,036 bytes	22,016 bytes	6.79 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CE8011A74796F66E90A38D7C7FE6D4EF`
`.pdata`	`0x00077000`	9,696 bytes	9,728 bytes	5.68 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`32A2D9077C81202F9C7CD8E7E7BA88F9`
`BINKDATA`	`0x0007a000`	11,968 bytes	12,288 bytes	6.84 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`66AEC08C9C3E408E495CFEA91EBA0C2C`
`BINKCONS`	`0x0007d000`	30,468 bytes	30,720 bytes	6.32 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D6B12018758951ECC295F1D99C96F69F`
`RADDATA`	`0x00085000`	44 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`RADCONST`	`0x00086000`	150 bytes	512 bytes	2.04 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A5D6AA623A91B7A4D5B4E800EA3623B9`
`.rsrc`	`0x00087000`	19,464 bytes	19,968 bytes	5.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`9F1F343AA5EE66D0FFCBBDDD7DBD8798`
`.reloc`	`0x0008c000`	2,010 bytes	2,048 bytes	1.80 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`38A83F06C2AE0027F132F6F32E5345C9`

Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 9 (18,912 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	17,776 bytes	94%
RT_STRING	1	134 bytes	0.7%
RT_GROUP_ICON	1	90 bytes	0.5%
RT_VERSION	1	912 bytes	4.8%

Certificate Chain Analysis

▼

Certificate Information

Product	Bink and Smacker
Description	RAD Video Tools
File Version	1.994d
Copyright	Copyright (C) 1994-2014, RAD Game Tools, Inc.

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	bink2w64.dll
File Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version	1.0.210.174
Database Version	2025-03-15 03:01:05 UTC

The bink2w64.dll (RAD Video Tools) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification