The binkw32 dll (RAD Video Tools) RAD Game Tools, Inc File Malware Analysis

The binkw32.dll (RAD Video Tools) File Analysis

Updated 1 month ago

Checked by Malware Check

binkw32.dll

Hash Type	Value	Action
MD5	0d8168d5639b7e93cc3671384517ca93
SHA1	ca82bdbb9404f12c4f6d79079b51716d4a5e6a48
SHA256	ad55ec64a893f233ac648ac974562f53736003b17bfd14527e66b3ffc8c2cdcb
SHA512	f31a43f29a07c9a63f05bd46bd6f86bb04a68c87a0b14da839d757cc412bcb43d50abc13d397831161b6606ad4a2ce967fb933f311ecb8c62d7b59ea9b38a94e
ImpHash	e19e3b97f8350c904fa8ff9621724dc5

Hash Type

Value

Action

MD5

0d8168d5639b7e93cc3671384517ca93

SHA1

ca82bdbb9404f12c4f6d79079b51716d4a5e6a48

SHA256

ad55ec64a893f233ac648ac974562f53736003b17bfd14527e66b3ffc8c2cdcb

SHA512

f31a43f29a07c9a63f05bd46bd6f86bb04a68c87a0b14da839d757cc412bcb43d50abc13d397831161b6606ad4a2ce967fb933f311ecb8c62d7b59ea9b38a94e

ImpHash

e19e3b97f8350c904fa8ff9621724dc5

PE Analysis

Basic Information

▼

Icon	Hash: 0a90235094a71d415860145540e74628 Fuzzy: e98a80edc16daf72a41c04b1dd054906 dHash: a442f0f0f071724e
Image Base	`0x18000000`
Entry Point	`0x18001d80`
Compilation Time	2009-04-03 22:04:48
Checksum	0x0002a945 (Actual: 0x0002a945)
OS Version	4.0
PEiD Signatures	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
PDB Path	`C:\devel\projects\bink\build\binkw32.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	4 libraries USER32, GDI32, KERNEL32, WINMM
Exports	72 functions
Resources	7 Resources
Sections	14 Sections

Version Information

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.9n
LegalCopyright	Copyright (C) 1994-2009, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.9n
Comments	Thank you for using Bink and Smacker!
Translation	0x0409 0x04e4

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	4,428 bytes	4,608 bytes	6.25 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`E884346C165CC36CF629AF6DC6F93CD6`
`BINKY12`	`0x00003000`	432 bytes	512 bytes	5.42 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7381ABE3728EAB7DB3E4B89CCB91AA52`
`BINKY16`	`0x00004000`	2,264 bytes	2,560 bytes	5.87 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5D8F2008E9495982B4CBBD5D51F9A2CE`
`BINKP8`	`0x00005000`	2,297 bytes	2,560 bytes	6.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`14567558D98481E0290F5135F82CD243`
`BINK16`	`0x00006000`	4,107 bytes	4,608 bytes	6.08 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`B6A2ED859CDF6FB67E51DB255D9DDC48`
`BINK32`	`0x00008000`	4,938 bytes	5,120 bytes	6.35 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`A56E7C5B1BF9119EEFA872B6A6F467A3`
`BINK`	`0x0000a000`	94,098 bytes	94,208 bytes	6.57 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`27549419B792EC0D9BCD3F47A171A53A`
`BINKBSS`	`0x00021000`	21,280 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_UNINITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00027000`	5,881 bytes	6,144 bytes	5.40 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`5DCABC3CA08A97AD35CECD24A7DD1F3F`
`.data`	`0x00029000`	152 bytes	512 bytes	1.06 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`6C7B50137F2A5D53EE97B4A3D9CC7C10`
`BINKCONS`	`0x0002a000`	20,624 bytes	20,992 bytes	6.17 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A40B966A18212971A0292A6EEA65A9E9`
`BINKDATA`	`0x00030000`	16,536 bytes	16,896 bytes	7.58 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`C645A15DF5755E11C53973A8BC1F3BC6`
`.rsrc`	`0x00035000`	8,568 bytes	8,704 bytes	4.73 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`21754CDC87250E427C569324BE435D5C`
`.reloc`	`0x00038000`	4,852 bytes	5,120 bytes	6.06 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`2B6EACAAB7C5E15845F4D25730FC90A2`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 7 (8,108 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	4	7,008 bytes	86.4%
RT_STRING	1	130 bytes	1.6%
RT_GROUP_ICON	1	62 bytes	0.8%
RT_VERSION	1	908 bytes	11.2%

Certificate Chain Analysis

▼

Certificate Information

Product	Bink and Smacker
Description	RAD Video Tools
File Version	1.9n
Copyright	Copyright (C) 1994-2009, RAD Game Tools, Inc.

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	binkw32.dll
File Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-11-24 22:00:27 UTC

The binkw32.dll (RAD Video Tools) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification