The binkw32 dll (RAD Video Tools) RAD Game Tools, Inc File Malware Analysis

Hash Type	Value	Action
MD5	245bd2ea9e44300edb396ee6b487730d
SHA1	e7a2670c5e61d3645e39e7e9ba779eea743daee7
SHA256	c6c06e2d21f2179f0b7fbe829a4b17a7b371440d2c679253ec86b64d421185bd
SHA512	7a28df0cd8386b9082f07e53294275dfef995c938c765ac553165348eabc30c4f065ff275a42bfeaa3c07aff2a8e55be99903bd3629be2bd74811ced2ea41fd6
ImpHash	5654872fe1bf46f5b5bfe50e7a2a0fa7

PE Analysis

Basic Information

▼

Icon	Hash: 0a90235094a71d415860145540e74628 Fuzzy: e98a80edc16daf72a41c04b1dd054906 dHash: a442f0f0f071724e
Image Base	`0x18000000`
Entry Point	`0x18005fab`
Compilation Time	2005-01-09 02:53:35
Checksum	0x00000000 (Actual: 0x0005321d)
OS Version	4.0
PEiD Signatures	`PE32 executable (DLL) (GUI) Intel 80386, for MS Windows`
PDB Path	`D:\Devel\projects\bink\build\binkw32.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	4 libraries USER32, GDI32, KERNEL32, WINMM
Exports	86 functions
Resources	7 Resources
Sections	36 Sections

Version Information

▼

CompanyName	RAD Game Tools, Inc.
FileDescription	RAD Video Tools
FileVersion	1.7d
LegalCopyright	Copyright (C) 1994-2005, RAD Game Tools, Inc.
LegalTrademarks	Bink and Smacker are trademarks of RAD Game Tools, Inc.
ProductName	Bink and Smacker
ProductVersion	1.7d
Comments	Thank you for using Bink and Smacker!

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	41,698 bytes	41,984 bytes	6.62 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AF07D6E16F22D162C7B866F4C2B141D9`
`BINK`	`0x0000c000`	75,498 bytes	75,776 bytes	6.55 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`4C4CA1163CD842F1A824C17FD627F277`
`BINK16`	`0x0001f000`	6,429 bytes	6,656 bytes	5.97 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`898236C08EC5B44B8D796C6824505310`
`BINK4444`	`0x00021000`	7,375 bytes	7,680 bytes	5.98 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`64EFAA1035E0DC92930B1CC760D8C730`
`BINK5551`	`0x00023000`	7,478 bytes	7,680 bytes	6.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9E8184521CC419F35FD36D9398D7720D`
`BINK32`	`0x00025000`	6,250 bytes	6,656 bytes	5.99 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8B3FCC4DA8F88CC1CD35D84EF4A4C02F`
`BINK32A`	`0x00027000`	7,296 bytes	7,680 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`EC61731E262BE6D34BD860CFA64C6C62`
`BINK16X2`	`0x00029000`	3,114 bytes	3,584 bytes	5.64 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`83977241F37B4415C1A55BFDC140B38A`
`BINK32X2`	`0x0002a000`	3,238 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0BF06A1D41E73FDA8E2F84D6DF236B33`
`BINK16MX`	`0x0002b000`	515 bytes	1,024 bytes	3.90 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`D4D1A04F3772A768AF75D4B564DCF5D2`
`BINK32MX`	`0x0002c000`	687 bytes	1,024 bytes	4.80 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`282463F845637D531F2CA23B62C9B10D`
`BINK16M`	`0x0002d000`	503 bytes	512 bytes	5.85 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`303D1685AAA31BE4EF53EF56A331E964`
`BINK32M`	`0x0002e000`	547 bytes	1,024 bytes	4.09 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6EDCCC0CFD5FCA4DFB4DDCCA164529D8`
`BINKYUY2`	`0x0002f000`	361 bytes	512 bytes	4.75 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`47EC0A93605539766E2C379E604747C4`
`BINKYUY2`	`0x00030000`	3,423 bytes	3,584 bytes	5.85 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`92E84793D6AF48D6093FC0DDA1F55BA6`
`BINKYUY2`	`0x00031000`	492 bytes	512 bytes	5.77 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`CD4A4C6685E3C93F4D6679A0715AFB53`
`BINKYUY2`	`0x00032000`	292 bytes	512 bytes	4.03 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`048A3EEEA4BB9AF36A8261A403FA40E1`
`BINK32R`	`0x00033000`	5,226 bytes	5,632 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`997867D189294E98CA00D2E6DBC53C04`
`BINK32RA`	`0x00035000`	5,680 bytes	6,144 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`66897139FC047E91120F4056A4FD1DFD`
`BINK32RX`	`0x00037000`	3,238 bytes	3,584 bytes	5.89 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`215133C0588C22D88F296E15D51A40EA`
`BINK24`	`0x00038000`	7,350 bytes	7,680 bytes	6.04 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C860337804AB162B69B57C06939F2099`
`BINK24X2`	`0x0003a000`	4,190 bytes	4,608 bytes	5.94 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`9CF5DF78C4E70500143D8577DABE9A76`
`BINK24M`	`0x0003c000`	714 bytes	1,024 bytes	5.01 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`66CE022B36BB298D34A7DD49C5924C7F`
`BINK24R`	`0x0003d000`	6,182 bytes	6,656 bytes	6.00 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`360B3802407370372800CBC41DED7B68`
`BINK24RX`	`0x0003f000`	4,190 bytes	4,608 bytes	5.94 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`77807B1F00185EF0EFB32F46EFF0CA6D`
`BINK24RM`	`0x00041000`	804 bytes	1,024 bytes	5.44 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`BCF1E2848C41E59BBD6E0AAF2E087F16`
`BINKUYVY`	`0x00042000`	488 bytes	512 bytes	5.78 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`129DBF0EEE1A850AC7860D4105B8882D`
`BINKUYVY`	`0x00043000`	369 bytes	512 bytes	4.88 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`6AC7DC3272A6496637C872A3FCE9F94F`
`BINKUYVY`	`0x00044000`	3,551 bytes	3,584 bytes	5.87 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7B68CD5D691F1123DEAEC1DC534B2925`
`BINKUYVY`	`0x00045000`	327 bytes	512 bytes	4.17 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`AFAFD5508BBEBA5EEB8AFE05587E7ACA`
`BINKYV12`	`0x00046000`	653 bytes	1,024 bytes	4.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`7BA9D278AA17FA433FCE6BC360E41F4A`
`.rdata`	`0x00047000`	30,343 bytes	30,720 bytes	6.15 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`2E26190581FEDB7BC07ADAFC2D229E9D`
`.data`	`0x0004f000`	4,416 bytes	2,048 bytes	4.65 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B8F33190148A055283338D26A5E93CBD`
`BINKDATA`	`0x00051000`	56,352 bytes	56,832 bytes	3.23 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E2325E416F0FA87F7DBAD76AF1A17A79`
`.rsrc`	`0x0005f000`	8,496 bytes	8,704 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B96E686EACC2D48A05E3F9F958F7B3EF`
`.reloc`	`0x00062000`	21,122 bytes	21,504 bytes	6.67 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`C357CE868626BDF70BD6CD95080DB8FD`

Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 7 (8,040 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	4	7,008 bytes	87.2%
RT_STRING	1	130 bytes	1.6%
RT_GROUP_ICON	1	62 bytes	0.8%
RT_VERSION	1	840 bytes	10.4%

Certificate Chain Analysis

▼

Certificate Information

Product	Bink and Smacker
Description	RAD Video Tools
File Version	1.7d
Copyright	Copyright (C) 1994-2005, RAD Game Tools, Inc.

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	binkw32.dll
File Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.219.174
Database Version	2025-07-05 01:00:31 UTC

The binkw32.dll (RAD Video Tools) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification