App[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
App.exe
Size 4.9MB
Sample260701-rnvltaf12p
SHA256 9c2a824483bd3001da13472c937cc1b558bfaf178ec197bb02ecadcfb6ac67c8
MD5 389a91893e4410e3d5a56eedfbf568ef
SHA1 6d86ce06008bae4505e42955e4d7aff91f388b08
SHA512 27f43cc540e46c6ed7be4dc596a6dc5d86f3d2d600c3f9fed2d0f91841306722e5a6cb01ca30b454a56ad0f33f984ac34562089b332cf8cefc1f904279c5523f
SSDEEP 98304:R9oqfPd6bm+vhegD96Jd4yno0L43qbT3pUHZrhmP1Hu06sow+Gx6:XV3dqV5HDMJdxBcqbTS3s6ss
TLSH
T18B362357EDA208B2F474CB308C147166F9F8EF260E25D6151B492984153B27EBEAFB0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
App.exe

File Explorer

App.exe

.exe 4.9MB

App.exe

SHA256 9c2a824483bd3001da13472c937cc1b558bfaf178ec197bb02ecadcfb6ac67c8
MD5 389a91893e4410e3d5a56eedfbf568ef
SHA1 6d86ce06008bae4505e42955e4d7aff91f388b08
SHA512 27f43cc540e46c6ed7be4dc596a6dc5d86f3d2d600c3f9fed2d0f91841306722e5a6cb01ca30b454a56ad0f33f984ac34562089b332cf8cefc1f904279c5523f
SSDEEP 98304:R9oqfPd6bm+vhegD96Jd4yno0L43qbT3pUHZrhmP1Hu06sow+Gx6:XV3dqV5HDMJdxBcqbTS3s6ss
TLSH
T18B362357EDA208B2F474CB308C147166F9F8EF260E25D6151B492984153B27EBEAFB0D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6391315

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

??0Assembler@a64@_abi_1_10@asmjit@@QEAA@PEAVCodeHolder@23@@Z ??0Assembler@x86@_abi_1_10@asmjit@@QEAA@PEAVCodeHolder@23@@Z ??0BaseAssembler@_abi_1_10@asmjit@@QEAA@XZ ??0BaseBuilder@_abi_1_10@asmjit@@QEAA@XZ ??0BaseCompiler@_abi_1_10@asmjit@@QEAA@XZ ??0BaseEmitter@_abi_1_10@asmjit@@QEAA@W4EmitterType@12@@Z ??0Builder@a64@_abi_1_10@asmjit@@QEAA@PEAVCodeHolder@23@@Z ??0Builder@x86@_abi_1_10@asmjit@@QEAA@PEAVCodeHolder@23@@Z ??0CodeHolder@_abi_1_10@asmjit@@QEAA@PEBUTemporary@Support@12@@Z ??0Compiler@a64@_abi_1_10@asmjit@@QEAA@PEAVCodeHolder@23@@Z ??0Compiler@x86@_abi_1_10@asmjit@@QEAA@PEAVCodeHolder@23@@Z ??0ConstPool@_abi_1_10@asmjit@@QEAA@PEAVZone@12@@Z ??0ErrorHandler@_abi_1_10@asmjit@@QEAA@XZ ??0FileLogger@_abi_1_10@asmjit@@QEAA@PEAU_iobuf@@@Z ??0FuncPass@_abi_1_10@asmjit@@QEAA@PEBD@Z ??0JitAllocator@_abi_1_10@asmjit@@QEAA@PEBUCreateParams@012@@Z ??0JitRuntime@_abi_1_10@asmjit@@QEAA@PEBUCreateParams@JitAllocator@12@@Z ??0Logger@_abi_1_10@asmjit@@QEAA@XZ ??0Pass@_abi_1_10@asmjit@@QEAA@PEBD@Z ??0StringLogger@_abi_1_10@asmjit@@QEAA@XZ ??0Target@_abi_1_10@asmjit@@QEAA@XZ ??1Assembler@a64@_abi_1_10@asmjit@@UEAA@XZ ??1Assembler@x86@_abi_1_10@asmjit@@UEAA@XZ ??1BaseAssembler@_abi_1_10@asmjit@@UEAA@XZ ??1BaseBuilder@_abi_1_10@asmjit@@UEAA@XZ ??1BaseCompiler@_abi_1_10@asmjit@@UEAA@XZ ??1BaseEmitter@_abi_1_10@asmjit@@UEAA@XZ ??1Builder@a64@_abi_1_10@asmjit@@UEAA@XZ ??1Builder@x86@_abi_1_10@asmjit@@UEAA@XZ ??1CodeHolder@_abi_1_10@asmjit@@QEAA@XZ ??1Compiler@a64@_abi_1_10@asmjit@@UEAA@XZ ??1Compiler@x86@_abi_1_10@asmjit@@UEAA@XZ ??1ConstPool@_abi_1_10@asmjit@@QEAA@XZ ??1ErrorHandler@_abi_1_10@asmjit@@UEAA@XZ ??1FileLogger@_abi_1_10@asmjit@@UEAA@XZ ??1JitAllocator@_abi_1_10@asmjit@@QEAA@XZ ??1JitRuntime@_abi_1_10@asmjit@@UEAA@XZ ??1Logger@_abi_1_10@asmjit@@UEAA@XZ ??1Pass@_abi_1_10@asmjit@@UEAA@XZ ??1StringLogger@_abi_1_10@asmjit@@UEAA@XZ ??1Target@_abi_1_10@asmjit@@UEAA@XZ ??_FAssembler@a64@_abi_1_10@asmjit@@QEAAXXZ ??_FAssembler@x86@_abi_1_10@asmjit@@QEAAXXZ ??_FBuilder@a64@_abi_1_10@asmjit@@QEAAXXZ ??_FBuilder@x86@_abi_1_10@asmjit@@QEAAXXZ ??_FCodeHolder@_abi_1_10@asmjit@@QEAAXXZ ??_FCompiler@a64@_abi_1_10@asmjit@@QEAAXXZ ??_FCompiler@x86@_abi_1_10@asmjit@@QEAAXXZ ??_FFileLogger@_abi_1_10@asmjit@@QEAAXXZ ??_FJitAllocator@_abi_1_10@asmjit@@QEAAXXZ ??_FJitRuntime@_abi_1_10@asmjit@@QEAAXXZ ?_add@JitRuntime@_abi_1_10@asmjit@@UEAAIPEAPEAXPEAVCodeHolder@23@@Z ?_alloc@Zone@_abi_1_10@asmjit@@QEAAPEAX_K0@Z ?_alloc@ZoneAllocator@_abi_1_10@asmjit@@QEAAPEAX_KAEA_K@Z ?_allocZeroed@ZoneAllocator@_abi_1_10@asmjit@@QEAAPEAX_KAEA_K@Z ?_append@ZoneBitVector@_abi_1_10@asmjit@@QEAAIPEAVZoneAllocator@23@_N@Z ?_archTraits@_abi_1_10@asmjit@@3QBUArchTraits@12@B ?_cleanupBlock@ZoneStackBase@_abi_1_10@asmjit@@QEAAXI_K@Z ?_commonInfoTable@InstDB@x86@_abi_1_10@asmjit@@3QBUCommonInfo@1234@B ?_emit@Assembler@a64@_abi_1_10@asmjit@@UEAAIIAEBUOperand_@34@00PEBU534@@Z ?_emit@Assembler@x86@_abi_1_10@asmjit@@UEAAIIAEBUOperand_@34@00PEBU534@@Z ?_emit@BaseBuilder@_abi_1_10@asmjit@@UEAAIIAEBUOperand_@23@00PEBU423@@Z ?_emitI@BaseEmitter@_abi_1_10@asmjit@@QEAAII@Z ?_emitI@BaseEmitter@_abi_1_10@asmjit@@QEAAIIAEBUOperand_@23@00000@Z ?_emitI@BaseEmitter@_abi_1_10@asmjit@@QEAAIIAEBUOperand_@23@0000@Z ?_emitI@BaseEmitter@_abi_1_10@asmjit@@QEAAIIAEBUOperand_@23@000@Z ?_emitI@BaseEmitter@_abi_1_10@asmjit@@QEAAIIAEBUOperand_@23@00@Z ?_emitI@BaseEmitter@_abi_1_10@asmjit@@QEAAIIAEBUOperand_@23@0@Z ?_emitI@BaseEmitter@_abi_1_10@asmjit@@QEAAIIAEBUOperand_@23@@Z ?_emitOpArray@BaseEmitter@_abi_1_10@asmjit@@UEAAIIPEBUOperand_@23@_K@Z ?_grow@ZoneVectorBase@_abi_1_10@asmjit@@IEAAIPEAVZoneAllocator@23@II@Z ?_init@Zone@_abi_1_10@asmjit@@QEAAX_K0PEBUTemporary@Support@23@@Z ?_init@ZoneStackBase@_abi_1_10@asmjit@@QEAAIPEAVZoneAllocator@23@_K@Z ?_insert@ZoneHashBase@_abi_1_10@asmjit@@QEAAPEAVZoneHashNode@23@PEAVZoneAllocator@23@PEAV423@@Z ?_instInfoTable@InstDB@a64@_abi_1_10@asmjit@@3QBUInstInfo@1234@B ?_instInfoTable@InstDB@x86@_abi_1_10@asmjit@@3QBUInstInfo@1234@B ?_instSignatureTable@InstDB@x86@_abi_1_10@asmjit@@3QBUInstSignature@1234@B ?_log@FileLogger@_abi_1_10@asmjit@@UEAAIPEBD_K@Z ?_log@StringLogger@_abi_1_10@asmjit@@UEAAIPEBD_K@Z ?_newConst@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAVBaseMem@23@W4ConstPoolScope@23@PEBX_K@Z ?_newReg@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAVBaseReg@23@AEBV423@PEBD@Z ?_newReg@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAVBaseReg@23@W4TypeId@23@PEBD@Z ?_newRegFmt@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAVBaseReg@23@AEBV423@PEBDZZ ?_newRegFmt@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAVBaseReg@23@W4TypeId@23@PEBDZZ ?_newStack@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAVBaseMem@23@IIPEBD@Z ?_opChar@String@_abi_1_10@asmjit@@QEAAIW4ModifyOp@123@D@Z ?_opChars@String@_abi_1_10@asmjit@@QEAAIW4ModifyOp@123@D_K@Z ?_opFormat@String@_abi_1_10@asmjit@@QEAAIW4ModifyOp@123@PEBDZZ ?_opHex@String@_abi_1_10@asmjit@@QEAAIW4ModifyOp@123@PEBX_KD@Z ?_opNumber@String@_abi_1_10@asmjit@@QEAAIW4ModifyOp@123@_KI1W4StringFormatFlags@23@@Z ?_opSignatureTable@InstDB@x86@_abi_1_10@asmjit@@3QBUOpSignature@1234@B ?_opString@String@_abi_1_10@asmjit@@QEAAIW4ModifyOp@123@PEBD_K@Z ?_opVFormat@String@_abi_1_10@asmjit@@QEAAIW4ModifyOp@123@PEBDPEAD@Z ?_prepareBlock@ZoneStackBase@_abi_1_10@asmjit@@QEAAII_K@Z ?_rehash@ZoneHashBase@_abi_1_10@asmjit@@QEAAXPEAVZoneAllocator@23@I@Z ?_release@JitRuntime@_abi_1_10@asmjit@@UEAAIPEAX@Z ?_releaseDynamic@ZoneAllocator@_abi_1_10@asmjit@@QEAAXPEAX_K@Z ?_remove@ZoneHashBase@_abi_1_10@asmjit@@QEAAPEAVZoneHashNode@23@PEAVZoneAllocator@23@PEAV423@@Z ?_reserve@ZoneVectorBase@_abi_1_10@asmjit@@IEAAIPEAVZoneAllocator@23@II@Z ?_resize@ZoneBitVector@_abi_1_10@asmjit@@QEAAIPEAVZoneAllocator@23@II_N@Z ?_resize@ZoneVectorBase@_abi_1_10@asmjit@@IEAAIPEAVZoneAllocator@23@II@Z ?_typeData@TypeUtils@_abi_1_10@asmjit@@3UTypeData@123@B ?_zeroBlock@Zone@_abi_1_10@asmjit@@2UBlock@123@B ?add@ConstPool@_abi_1_10@asmjit@@QEAAIPEBX_KAEA_K@Z ?addAddressToAddressTable@CodeHolder@_abi_1_10@asmjit@@QEAAI_K@Z ?addAfter@BaseBuilder@_abi_1_10@asmjit@@QEAAPEAVBaseNode@23@PEAV423@0@Z ?addBefore@BaseBuilder@_abi_1_10@asmjit@@QEAAPEAVBaseNode@23@PEAV423@0@Z ?addDiagnosticOptions@BaseEmitter@_abi_1_10@asmjit@@QEAAXW4DiagnosticOptions@23@@Z ?addFunc@BaseCompiler@_abi_1_10@asmjit@@QEAAPEAVFuncNode@23@PEAV423@@Z ?addFuncNode@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVFuncNode@23@AEBUFuncSignature@23@@Z ?addFuncRetNode@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVFuncRetNode@23@AEBUOperand_@23@1@Z ?addInvokeNode@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVInvokeNode@23@IAEBUOperand_@23@AEBUFuncSignature@23@@Z ?addNode@BaseBuilder@_abi_1_10@asmjit@@QEAAPEAVBaseNode@23@PEAV423@@Z ?addPass@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAVPass@23@@Z ?align@Assembler@a64@_abi_1_10@asmjit@@UEAAIW4AlignMode@34@I@Z ?align@Assembler@x86@_abi_1_10@asmjit@@UEAAIW4AlignMode@34@I@Z ?align@BaseBuilder@_abi_1_10@asmjit@@UEAAIW4AlignMode@23@I@Z ?alloc@JitAllocator@_abi_1_10@asmjit@@QEAAIPEAPEAX0_K@Z ?alloc@VirtMem@_abi_1_10@asmjit@@YAIPEAPEAX_KW4MemoryFlags@123@@Z ?allocDualMapping@VirtMem@_abi_1_10@asmjit@@YAIPEAUDualMapping@123@_KW4MemoryFlags@123@@Z ?allocZeroed@Zone@_abi_1_10@asmjit@@QEAAPEAX_K0@Z ?assertionFailed@DebugUtils@_abi_1_10@asmjit@@YAXPEBDH0@Z ?assign@String@_abi_1_10@asmjit@@QEAAIPEBD_K@Z ?attach@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAVBaseEmitter@23@@Z ?bind@BaseAssembler@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@@Z ?bind@BaseBuilder@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@@Z ?bindLabel@CodeHolder@_abi_1_10@asmjit@@QEAAIAEBVLabel@23@I_K@Z ?clear@String@_abi_1_10@asmjit@@QEAAIXZ ?clearDiagnosticOptions@BaseEmitter@_abi_1_10@asmjit@@QEAAXW4DiagnosticOptions@23@@Z ?codeSize@CodeHolder@_abi_1_10@asmjit@@QEBA_KXZ ?comment@BaseAssembler@_abi_1_10@asmjit@@UEAAIPEBD_K@Z ?comment@BaseBuilder@_abi_1_10@asmjit@@UEAAIPEBD_K@Z ?commentf@BaseEmitter@_abi_1_10@asmjit@@QEAAIPEBDZZ ?commentv@BaseEmitter@_abi_1_10@asmjit@@QEAAIPEBDPEAD@Z ?copyFlattenedData@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAX_KW4CopySectionFlags@23@@Z ?copyFrom@ZoneBitVector@_abi_1_10@asmjit@@QEAAIPEAVZoneAllocator@23@AEBV123@@Z ?copySectionData@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAX_KIW4CopySectionFlags@23@@Z ?debugOutput@DebugUtils@_abi_1_10@asmjit@@YAXPEBD@Z ?deletePass@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAVPass@23@@Z ?detach@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAVBaseEmitter@23@@Z ?dup@Zone@_abi_1_10@asmjit@@QEAAPEAXPEBX_K_N@Z ?embed@BaseAssembler@_abi_1_10@asmjit@@UEAAIPEBX_K@Z ?embed@BaseBuilder@_abi_1_10@asmjit@@UEAAIPEBX_K@Z ?embedConstPool@BaseAssembler@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@AEBVConstPool@23@@Z ?embedConstPool@BaseBuilder@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@AEBVConstPool@23@@Z ?embedDataArray@BaseAssembler@_abi_1_10@asmjit@@UEAAIW4TypeId@23@PEBX_K2@Z ?embedDataArray@BaseBuilder@_abi_1_10@asmjit@@UEAAIW4TypeId@23@PEBX_K2@Z ?embedLabel@BaseAssembler@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@_K@Z ?embedLabel@BaseBuilder@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@_K@Z ?embedLabelDelta@BaseAssembler@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@0_K@Z ?embedLabelDelta@BaseBuilder@_abi_1_10@asmjit@@UEAAIAEBVLabel@23@0_K@Z ?emitAnnotatedJump@BaseCompiler@_abi_1_10@asmjit@@QEAAIIAEBUOperand_@23@PEAVJumpAnnotation@23@@Z ?emitArgsAssignment@BaseEmitter@_abi_1_10@asmjit@@QEAAIAEBVFuncFrame@23@AEBVFuncArgsAssignment@23@@Z ?emitEpilog@BaseEmitter@_abi_1_10@asmjit@@QEAAIAEBVFuncFrame@23@@Z ?emitProlog@BaseEmitter@_abi_1_10@asmjit@@QEAAIAEBVFuncFrame@23@@Z ?endFunc@BaseCompiler@_abi_1_10@asmjit@@QEAAIXZ ?ensureAddressTableSection@CodeHolder@_abi_1_10@asmjit@@QEAAPEAVSection@23@XZ ?eq@String@_abi_1_10@asmjit@@QEBA_NPEBD_K@Z ?errorAsString@DebugUtils@_abi_1_10@asmjit@@YAPEBDI@Z ?fill@ConstPool@_abi_1_10@asmjit@@QEBAXPEAX@Z ?finalize@BaseEmitter@_abi_1_10@asmjit@@UEAAIXZ ?finalize@Builder@a64@_abi_1_10@asmjit@@UEAAIXZ ?finalize@Builder@x86@_abi_1_10@asmjit@@UEAAIXZ ?finalize@Compiler@a64@_abi_1_10@asmjit@@UEAAIXZ ?finalize@Compiler@x86@_abi_1_10@asmjit@@UEAAIXZ ?finalize@FuncFrame@_abi_1_10@asmjit@@QEAAIXZ ?flatten@CodeHolder@_abi_1_10@asmjit@@QEAAIXZ ?flushInstructionCache@VirtMem@_abi_1_10@asmjit@@YAXPEAX_K@Z ?formatData@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4FormatFlags@23@W4Arch@23@W4TypeId@23@PEBX_K5@Z ?formatDataType@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4FormatFlags@23@W4Arch@23@W4TypeId@23@@Z ?formatFeature@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4Arch@23@I@Z ?formatInstruction@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4FormatFlags@23@PEBVBaseEmitter@23@W4Arch@23@AEBVBaseInst@23@PEBUOperand_@23@_K@Z ?formatLabel@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4FormatFlags@23@PEBVBaseEmitter@23@I@Z ?formatNode@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@AEBVFormatOptions@23@PEBVBaseBuilder@23@PEBVBaseNode@23@@Z ?formatNodeList@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@AEBVFormatOptions@23@PEBVBaseBuilder@23@@Z ?formatNodeList@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@AEBVFormatOptions@23@PEBVBaseBuilder@23@PEBVBaseNode@23@3@Z ?formatOperand@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4FormatFlags@23@PEBVBaseEmitter@23@W4Arch@23@AEBUOperand_@23@@Z ?formatRegister@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4FormatFlags@23@PEBVBaseEmitter@23@W4Arch@23@W4RegType@23@I@Z ?formatTypeId@Formatter@_abi_1_10@asmjit@@YAIAEAVString@23@W4TypeId@23@@Z ?getTickCount@OSUtils@_abi_1_10@asmjit@@YAIXZ ?growBuffer@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAUCodeBuffer@23@_K@Z ?hardenedRuntimeInfo@VirtMem@_abi_1_10@asmjit@@YA?AUHardenedRuntimeInfo@123@XZ ?host@CpuInfo@_abi_1_10@asmjit@@SAAEBV123@XZ ?info@VirtMem@_abi_1_10@asmjit@@YA?AUInfo@123@XZ ?init@CallConv@_abi_1_10@asmjit@@QEAAIW4CallConvId@23@AEBVEnvironment@23@@Z ?init@CodeHolder@_abi_1_10@asmjit@@QEAAIAEBVEnvironment@23@AEBVCpuFeatures@23@_K@Z ?init@CodeHolder@_abi_1_10@asmjit@@QEAAIAEBVEnvironment@23@_K@Z ?init@FuncDetail@_abi_1_10@asmjit@@QEAAIAEBUFuncSignature@23@AEBVEnvironment@23@@Z ?init@FuncFrame@_abi_1_10@asmjit@@QEAAIAEBVFuncDetail@23@@Z ?instIdToString@InstAPI@_abi_1_10@asmjit@@YAIW4Arch@23@IAEAVString@23@@Z ?isLabelValid@BaseEmitter@_abi_1_10@asmjit@@QEBA_NI@Z ?labelByName@BaseEmitter@_abi_1_10@asmjit@@QEAA?AVLabel@23@PEBD_KI@Z ?labelIdByName@CodeHolder@_abi_1_10@asmjit@@QEAAIPEBD_KI@Z ?labelNodeOf@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVLabelNode@23@I@Z ?logf@Logger@_abi_1_10@asmjit@@QEAAIPEBDZZ ?logv@Logger@_abi_1_10@asmjit@@QEAAIPEBDPEAD@Z ?newAlignNode@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVAlignNode@23@W4AlignMode@23@I@Z ?newCommentNode@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVCommentNode@23@PEBD_K@Z ?newConstPoolNode@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVConstPoolNode@23@@Z ?newEmbedDataNode@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVEmbedDataNode@23@W4TypeId@23@PEBX_K3@Z ?newFuncNode@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVFuncNode@23@AEBUFuncSignature@23@@Z ?newFuncRetNode@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVFuncRetNode@23@AEBUOperand_@23@1@Z ?newInstNode@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVInstNode@23@IW4InstOptions@23@I@Z ?newInvokeNode@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVInvokeNode@23@IAEBUOperand_@23@AEBUFuncSignature@23@@Z ?newJumpAnnotation@BaseCompiler@_abi_1_10@asmjit@@QEAAPEAVJumpAnnotation@23@XZ ?newJumpNode@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVJumpNode@23@IW4InstOptions@23@AEBUOperand_@23@PEAVJumpAnnotation@23@@Z ?newLabel@BaseAssembler@_abi_1_10@asmjit@@UEAA?AVLabel@23@XZ ?newLabel@BaseBuilder@_abi_1_10@asmjit@@UEAA?AVLabel@23@XZ ?newLabelEntry@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAPEAVLabelEntry@23@@Z ?newLabelLink@CodeHolder@_abi_1_10@asmjit@@QEAAPEAULabelLink@23@PEAVLabelEntry@23@I_K_JAEBUOffsetFormat@23@@Z ?newLabelNode@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVLabelNode@23@@Z ?newNamedLabel@BaseAssembler@_abi_1_10@asmjit@@UEAA?AVLabel@23@PEBD_KW4LabelType@23@I@Z ?newNamedLabel@BaseBuilder@_abi_1_10@asmjit@@UEAA?AVLabel@23@PEBD_KW4LabelType@23@I@Z ?newNamedLabelEntry@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAPEAVLabelEntry@23@PEBD_KW4LabelType@23@I@Z ?newRelocEntry@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAPEAURelocEntry@23@W4RelocType@23@@Z ?newSection@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAPEAVSection@23@PEBD_KW4SectionFlags@23@IH@Z ?newVirtReg@BaseCompiler@_abi_1_10@asmjit@@QEAAIPEAPEAVVirtReg@23@W4TypeId@23@UOperandSignature@23@PEBD@Z ?onAttach@Assembler@a64@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onAttach@Assembler@x86@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onAttach@BaseAssembler@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@23@@Z ?onAttach@BaseBuilder@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@23@@Z ?onAttach@BaseCompiler@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@23@@Z ?onAttach@Builder@a64@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onAttach@Builder@x86@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onAttach@Compiler@a64@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onAttach@Compiler@x86@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onDetach@Assembler@a64@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onDetach@Assembler@x86@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onDetach@BaseAssembler@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@23@@Z ?onDetach@BaseBuilder@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@23@@Z ?onDetach@BaseCompiler@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@23@@Z ?onDetach@Builder@a64@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onDetach@Builder@x86@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onDetach@Compiler@a64@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onDetach@Compiler@x86@_abi_1_10@asmjit@@UEAAIPEAVCodeHolder@34@@Z ?onSettingsUpdated@BaseEmitter@_abi_1_10@asmjit@@UEAAXXZ ?padEnd@String@_abi_1_10@asmjit@@QEAAI_KD@Z ?passByName@BaseBuilder@_abi_1_10@asmjit@@QEBAPEAVPass@23@PEBD@Z ?prepare@String@_abi_1_10@asmjit@@QEAAPEADW4ModifyOp@123@_K@Z ?protect@VirtMem@_abi_1_10@asmjit@@YAIPEAX_KW4MemoryFlags@123@@Z ?protectJitMemory@VirtMem@_abi_1_10@asmjit@@YAXW4ProtectJitAccess@123@@Z ?query@JitAllocator@_abi_1_10@asmjit@@QEBAIPEAXPEAPEAX1PEA_K@Z ?queryFeatures@InstAPI@_abi_1_10@asmjit@@YAIW4Arch@23@AEBVBaseInst@23@PEBUOperand_@23@_KPEAVCpuFeatures@23@@Z ?queryRWInfo@InstAPI@_abi_1_10@asmjit@@YAIW4Arch@23@AEBVBaseInst@23@PEBUOperand_@23@_KPEAUInstRWInfo@23@@Z ?registerLabelNode@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAVLabelNode@23@@Z ?release@JitAllocator@_abi_1_10@asmjit@@QEAAIPEAX@Z ?release@VirtMem@_abi_1_10@asmjit@@YAIPEAX_K@Z ?releaseDualMapping@VirtMem@_abi_1_10@asmjit@@YAIPEAUDualMapping@123@_K@Z ?relocateToBase@CodeHolder@_abi_1_10@asmjit@@QEAAI_K@Z ?removeNode@BaseBuilder@_abi_1_10@asmjit@@QEAAPEAVBaseNode@23@PEAV423@@Z ?removeNodes@BaseBuilder@_abi_1_10@asmjit@@QEAAXPEAVBaseNode@23@0@Z ?rename@BaseCompiler@_abi_1_10@asmjit@@QEAAXAEBVBaseReg@23@PEBDZZ ?reportError@BaseEmitter@_abi_1_10@asmjit@@QEAAIIPEBD@Z ?reserveBuffer@CodeHolder@_abi_1_10@asmjit@@QEAAIPEAUCodeBuffer@23@_K@Z ?reset@CodeHolder@_abi_1_10@asmjit@@QEAAXW4ResetPolicy@23@@Z ?reset@ConstPool@_abi_1_10@asmjit@@QEAAXPEAVZone@23@@Z ?reset@JitAllocator@_abi_1_10@asmjit@@QEAAXW4ResetPolicy@23@@Z ?reset@String@_abi_1_10@asmjit@@QEAAIXZ ?reset@Zone@_abi_1_10@asmjit@@QEAAXW4ResetPolicy@23@@Z ?reset@ZoneAllocator@_abi_1_10@asmjit@@QEAAXPEAVZone@23@@Z ?resolveUnresolvedLinks@CodeHolder@_abi_1_10@asmjit@@QEAAIXZ ?run@FuncPass@_abi_1_10@asmjit@@UEAAIPEAVZone@23@PEAVLogger@23@@Z ?runPasses@BaseBuilder@_abi_1_10@asmjit@@QEAAIXZ ?section@BaseAssembler@_abi_1_10@asmjit@@UEAAIPEAVSection@23@@Z ?section@BaseBuilder@_abi_1_10@asmjit@@UEAAIPEAVSection@23@@Z ?sectionByName@CodeHolder@_abi_1_10@asmjit@@QEBAPEAVSection@23@PEBD_K@Z ?sectionNodeOf@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAPEAVSectionNode@23@I@Z ?serializeTo@BaseBuilder@_abi_1_10@asmjit@@QEAAIPEAVBaseEmitter@23@@Z ?setCursor@BaseBuilder@_abi_1_10@asmjit@@QEAAPEAVBaseNode@23@PEAV423@@Z ?setErrorHandler@BaseEmitter@_abi_1_10@asmjit@@QEAAXPEAVErrorHandler@23@@Z ?setErrorHandler@CodeHolder@_abi_1_10@asmjit@@QEAAXPEAVErrorHandler@23@@Z ?setLogger@BaseEmitter@_abi_1_10@asmjit@@QEAAXPEAVLogger@23@@Z ?setLogger@CodeHolder@_abi_1_10@asmjit@@QEAAXPEAVLogger@23@@Z ?setOffset@BaseAssembler@_abi_1_10@asmjit@@QEAAI_K@Z ?setStackSize@BaseCompiler@_abi_1_10@asmjit@@QEAAIIII@Z ?sformat@Zone@_abi_1_10@asmjit@@QEAAPEADPEBDZZ ?shrink@JitAllocator@_abi_1_10@asmjit@@QEAAIPEAX_K@Z ?stackAlignment@Environment@_abi_1_10@asmjit@@QEBAIXZ ?statistics@JitAllocator@_abi_1_10@asmjit@@QEBA?AUStatistics@123@XZ ?stringToInstId@InstAPI@_abi_1_10@asmjit@@YAIW4Arch@23@PEBD_K@Z ?truncate@String@_abi_1_10@asmjit@@QEAAI_K@Z ?typeIdToRegSignature@ArchUtils@_abi_1_10@asmjit@@YAIW4Arch@23@W4TypeId@23@PEAW4523@PEAUOperandSignature@23@@Z ?updateFuncFrame@FuncArgsAssignment@_abi_1_10@asmjit@@QEBAIAEAVFuncFrame@23@@Z ?updateSectionLinks@BaseBuilder@_abi_1_10@asmjit@@QEAAXXZ ?validate@InstAPI@_abi_1_10@asmjit@@YAIW4Arch@23@AEBVBaseInst@23@PEBUOperand_@23@_KW4ValidationFlags@23@@Z

Name

.text

Size

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

402KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.RnTQD

Size

Virtual Size

993KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.pHzCX

Size

107KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Oh9IW

Size

4.8MB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

App.exe

generic