El Análisis de Malware del Archivo Performance V4 exe (Performance V4) Performance V4

Tipo de Hash	Valor	Acción
MD5	f384f0209bb439d1cfef96801eccb62d
SHA1	fc27fd2ce46b196c5952973b30a0e8be51bb2a49
SHA256	3fcba413b366f79b21b7177dc8a008d635c12d70fcf889dfa43756e8b2c08135
SHA512	1fbcbc7beacf2d32bc5915911cfc539961f6a7f0a632a62a1111310602e3ccbf6144778ac1ac8ba292ce5b30d5ddacf645a7202573d9f5b7030f23d031175fa7
ImpHash	d42595b695fc008ef2c56aabd8efd68e

▼

Icono	Hash: da39a9f163de6414ade5822a4cbc6fe2 Difuso: 104d5172e45b1effe9d3cbfe70959b99 dHash: d0b4aaa6ce728e6c
Base de Imagen	`0x00400000`
Punto de Entrada	`0x0047c620`
Tiempo de Compilación	1970-01-01 00:00:00
Suma de Verificación	0x00000000 (Real: 0x00cb9d29)
Versión del SO	6.1
Firmas PEiD	`PE32+ executable (GUI) x86-64, for MS Windows`
Firma Digital	No valid SignedData structure was found.
Importaciones	1 bibliotecas kernel32
Exportaciones	0 funciones
Recursos	4 Recursos
Secciones	9 Secciones

▼

Comments	Built using Wails (https://wails.io)
CompanyName	Performance V4
FileDescription	Performance V4
LegalCopyright	@TheTulantro @ParagonTweaks
ProductName	Performance V4
ProductVersion	1.0.0
Translation	0x0000 0x04b0

▼

Nombre	Dirección Virtual	Tamaño Virtual	Tamaño Bruto	Entropía	Características	MD5
`.text`	`0x00001000`	4,458,705 bytes	4,459,008 bytes	6.18 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5E390206BA4C3ACF701D35D44F2050BD`
`.rdata`	`0x00442000`	5,964,608 bytes	5,964,800 bytes	6.11 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`121BD16822689E48FAB918A7747D0122`
`.data`	`0x009f3000`	3,009,936 bytes	2,650,112 bytes	7.52 (Empaquetado/Cifrado)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`CA4B3C1D1FFB80A7BC80FD27A1A685D1`
`.pdata`	`0x00cd2000`	111,768 bytes	112,128 bytes	5.54 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4DFCBD82D0E00DC21DD43493067D5BE4`
`.xdata`	`0x00cee000`	180 bytes	512 bytes	1.76 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`7EAC35D22E211035520329DDADBDA4DF`
`.idata`	`0x00cef000`	1,342 bytes	1,536 bytes	4.02 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A13C1B5198E081F7311FB598818B77C3`
`.reloc`	`0x00cf0000`	99,596 bytes	99,840 bytes	5.44 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`3F15037A8F7B5CED36EBB9E169DE35C2`
`.symtab`	`0x00d09000`	4 bytes	512 bytes	0.02 (Normal)	`IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`07B5472D347D42780469FB2654B7FC54`
`.rsrc`	`0x00d0a000`	32,896 bytes	33,280 bytes	7.89 (Empaquetado/Cifrado)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`84D6F315E0DC445171BBF6815EFC8A30`

2 sección(es) con alta entropía (≥7.5) detectada(s) - posible empaquetado/cifrado

▼

Total de Recursos: 4 (32,575 bytes)

Tipo de Recurso	Cantidad	Tamaño Total	Porcentaje
RT_ICON	1	30,442 bytes	93.5%
RT_GROUP_ICON	1	20 bytes	0.1%
RT_VERSION	1	660 bytes	2%
RT_MANIFEST	1	1,453 bytes	4.5%

▼

Uwe Sieber #1 Principal

Período de Validez: 2011-09-08 13:43:52 → 2099-12-30 22:00:00

Algoritmo de Firma: 1.3.14.3.2.29

Número de Serie: 5B 16 02 A6 5C 10 8C B5 47 A1 5F 08 9A 33 5C 5B

Sectigo Public Time Stamping CA R36 #2 Cadena

Período de Validez: 2021-03-22 00:00:00 → 2036-03-21 23:59:59

Algoritmo de Firma: sha384RSA

Número de Serie: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F

Sectigo Public Time Stamping Signer R35 #3 Cadena

Período de Validez: 2024-01-15 00:00:00 → 2035-04-14 23:59:59

Algoritmo de Firma: sha384RSA

Número de Serie: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89

Sectigo Public Time Stamping Root R46 #4 Cadena

Período de Validez: 2021-03-22 00:00:00 → 2038-01-18 23:59:59

Algoritmo de Firma: sha384RSA

Número de Serie: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68

Microsoft Corporation #5 Cadena

Período de Validez: 2020-12-15 21:31:47 → 2021-12-02 21:31:47