API tools faq
paste
paladin316

Exes_4942d24da93e64503cf1bc4dbce2451c_exe_2019-07-02_15_30.json

paladin316
Jul 2nd, 2019
2,109
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 33.82 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_4942d24da93e64503cf1bc4dbce2451c.exe"
  7. [*] File Size: 414720
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "31b5454043bac0cfda143852ec2c11e0568a58672037280c1e97683017877865"
  10. [*] MD5: "4942d24da93e64503cf1bc4dbce2451c"
  11. [*] SHA1: "794ce1a328491e9057658575cf4048c32b557f97"
  12. [*] SHA512: "4f37c632403f7dd3356470ed051eaed0f91b1965760cff28ff0f682cf6364a1b309b0fc23f32c48b0f6e7fcd942b09873a61173985f203246659f8de6fa4c425"
  13. [*] CRC32: "9E6CFEA5"
  14. [*] SSDEEP: "12288:s5ED678GCkpEK4nwsmDODZlEw2pSRCQg:sSD6P8w5uZlP2pSd"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: .text, entropy: 7.84, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x00064800, virtual_size: 0x00064774"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "File has been identified by 22 Antiviruses on VirusTotal as malicious",
  29. "Details": [
  30. {
  31. "FireEye": "Generic.mg.4942d24da93e6450"
  32. },
  33. {
  34. "Qihoo-360": "HEUR/QVM03.0.4191.Malware.Gen"
  35. },
  36. {
  37. "McAfee": "Artemis!4942D24DA93E"
  38. },
  39. {
  40. "Cylance": "Unsafe"
  41. },
  42. {
  43. "Cybereason": "malicious.328491"
  44. },
  45. {
  46. "Symantec": "ML.Attribute.HighConfidence"
  47. },
  48. {
  49. "APEX": "Malicious"
  50. },
  51. {
  52. "Kaspersky": "HEUR:Trojan.MSIL.Injects.gen"
  53. },
  54. {
  55. "Paloalto": "generic.ml"
  56. },
  57. {
  58. "Tencent": "Win32.Trojan.Inject.Auto"
  59. },
  60. {
  61. "Endgame": "malicious (high confidence)"
  62. },
  63. {
  64. "Invincea": "heuristic"
  65. },
  66. {
  67. "McAfee-GW-Edition": "BehavesLike.Win32.Generic.gc"
  68. },
  69. {
  70. "Trapmine": "malicious.high.ml.score"
  71. },
  72. {
  73. "SentinelOne": "DFI - Suspicious PE"
  74. },
  75. {
  76. "Microsoft": "Trojan:Win32/Pynamer.A!ac"
  77. },
  78. {
  79. "ZoneAlarm": "HEUR:Trojan.MSIL.Injects.gen"
  80. },
  81. {
  82. "AhnLab-V3": "Trojan/Win32.Bladabindi.C3317807"
  83. },
  84. {
  85. "Acronis": "suspicious"
  86. },
  87. {
  88. "ESET-NOD32": "a variant of MSIL/GenKryptik.DMEX"
  89. },
  90. {
  91. "Fortinet": "MSIL/GenKryptik.DMCD!tr"
  92. },
  93. {
  94. "CrowdStrike": "win/malicious_confidence_90% (W)"
  95. }
  96. ]
  97. }
  98. ]
  99.  
  100. [*] Started Service: []
  101.  
  102. [*] Executed Commands: []
  103.  
  104. [*] Mutexes: []
  105.  
  106. [*] Modified Files: []
  107.  
  108. [*] Deleted Files: []
  109.  
  110. [*] Modified Registry Keys: []
  111.  
  112. [*] Deleted Registry Keys: []
  113.  
  114. [*] DNS Communications: []
  115.  
  116. [*] Domains: []
  117.  
  118. [*] Network Communication - ICMP: []
  119.  
  120. [*] Network Communication - HTTP: []
  121.  
  122. [*] Network Communication - SMTP: []
  123.  
  124. [*] Network Communication - Hosts: []
  125.  
  126. [*] Network Communication - IRC: []
  127.  
  128. [*] Static Analysis: {
  129. "dotnet": {
  130. "customattrs": null,
  131. "assemblyinfo": {
  132. "version": "10.6.4.17",
  133. "name": "n1uqQnXO2PcM"
  134. },
  135. "assemblyrefs": [
  136. {
  137. "version": "2.0.0.0",
  138. "name": "mscorlib"
  139. },
  140. {
  141. "version": "2.0.0.0",
  142. "name": "System.Windows.Forms"
  143. },
  144. {
  145. "version": "2.0.0.0",
  146. "name": "System"
  147. },
  148. {
  149. "version": "2.0.0.0",
  150. "name": "System.Drawing"
  151. },
  152. {
  153. "version": "8.0.0.0",
  154. "name": "Microsoft.VisualBasic"
  155. }
  156. ],
  157. "typerefs": [
  158. {
  159. "typename": "Microsoft.VisualBasic.CompilerServices.LateBinding",
  160. "assembly": "Microsoft.VisualBasic"
  161. },
  162. {
  163. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  164. "assembly": "System"
  165. },
  166. {
  167. "typename": "System.ComponentModel.Component",
  168. "assembly": "System"
  169. },
  170. {
  171. "typename": "System.ComponentModel.ComponentResourceManager",
  172. "assembly": "System"
  173. },
  174. {
  175. "typename": "System.ComponentModel.Container",
  176. "assembly": "System"
  177. },
  178. {
  179. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  180. "assembly": "System"
  181. },
  182. {
  183. "typename": "System.ComponentModel.EditorBrowsableState",
  184. "assembly": "System"
  185. },
  186. {
  187. "typename": "System.ComponentModel.IComponent",
  188. "assembly": "System"
  189. },
  190. {
  191. "typename": "System.ComponentModel.IContainer",
  192. "assembly": "System"
  193. },
  194. {
  195. "typename": "System.Configuration.ApplicationSettingsBase",
  196. "assembly": "System"
  197. },
  198. {
  199. "typename": "System.Configuration.SettingsBase",
  200. "assembly": "System"
  201. },
  202. {
  203. "typename": "System.Drawing.Bitmap",
  204. "assembly": "System.Drawing"
  205. },
  206. {
  207. "typename": "System.Drawing.Color",
  208. "assembly": "System.Drawing"
  209. },
  210. {
  211. "typename": "System.Drawing.Font",
  212. "assembly": "System.Drawing"
  213. },
  214. {
  215. "typename": "System.Drawing.FontStyle",
  216. "assembly": "System.Drawing"
  217. },
  218. {
  219. "typename": "System.Drawing.GraphicsUnit",
  220. "assembly": "System.Drawing"
  221. },
  222. {
  223. "typename": "System.Drawing.Icon",
  224. "assembly": "System.Drawing"
  225. },
  226. {
  227. "typename": "System.Drawing.Image",
  228. "assembly": "System.Drawing"
  229. },
  230. {
  231. "typename": "System.Drawing.Point",
  232. "assembly": "System.Drawing"
  233. },
  234. {
  235. "typename": "System.Drawing.Size",
  236. "assembly": "System.Drawing"
  237. },
  238. {
  239. "typename": "System.Drawing.SizeF",
  240. "assembly": "System.Drawing"
  241. },
  242. {
  243. "typename": "System.Windows.Forms.Application",
  244. "assembly": "System.Windows.Forms"
  245. },
  246. {
  247. "typename": "System.Windows.Forms.AutoScaleMode",
  248. "assembly": "System.Windows.Forms"
  249. },
  250. {
  251. "typename": "System.Windows.Forms.Button",
  252. "assembly": "System.Windows.Forms"
  253. },
  254. {
  255. "typename": "System.Windows.Forms.ButtonBase",
  256. "assembly": "System.Windows.Forms"
  257. },
  258. {
  259. "typename": "System.Windows.Forms.ContainerControl",
  260. "assembly": "System.Windows.Forms"
  261. },
  262. {
  263. "typename": "System.Windows.Forms.Control",
  264. "assembly": "System.Windows.Forms"
  265. },
  266. {
  267. "typename": "System.Windows.Forms.Control/ControlCollection",
  268. "assembly": "System.Windows.Forms"
  269. },
  270. {
  271. "typename": "System.Windows.Forms.FlatStyle",
  272. "assembly": "System.Windows.Forms"
  273. },
  274. {
  275. "typename": "System.Windows.Forms.Form",
  276. "assembly": "System.Windows.Forms"
  277. },
  278. {
  279. "typename": "System.Windows.Forms.FormBorderStyle",
  280. "assembly": "System.Windows.Forms"
  281. },
  282. {
  283. "typename": "System.Windows.Forms.FormStartPosition",
  284. "assembly": "System.Windows.Forms"
  285. },
  286. {
  287. "typename": "System.Windows.Forms.Label",
  288. "assembly": "System.Windows.Forms"
  289. },
  290. {
  291. "typename": "System.Windows.Forms.RadioButton",
  292. "assembly": "System.Windows.Forms"
  293. },
  294. {
  295. "typename": "System.Windows.Forms.TextBox",
  296. "assembly": "System.Windows.Forms"
  297. },
  298. {
  299. "typename": "System.Windows.Forms.TextBoxBase",
  300. "assembly": "System.Windows.Forms"
  301. },
  302. {
  303. "typename": "System.Windows.Forms.UserControl",
  304. "assembly": "System.Windows.Forms"
  305. },
  306. {
  307. "typename": "System.AppDomain",
  308. "assembly": "mscorlib"
  309. },
  310. {
  311. "typename": "System.Array",
  312. "assembly": "mscorlib"
  313. },
  314. {
  315. "typename": "System.Buffer",
  316. "assembly": "mscorlib"
  317. },
  318. {
  319. "typename": "System.Byte",
  320. "assembly": "mscorlib"
  321. },
  322. {
  323. "typename": "System.Collections.ArrayList",
  324. "assembly": "mscorlib"
  325. },
  326. {
  327. "typename": "System.Collections.ICollection",
  328. "assembly": "mscorlib"
  329. },
  330. {
  331. "typename": "System.Convert",
  332. "assembly": "mscorlib"
  333. },
  334. {
  335. "typename": "System.Diagnostics.DebuggableAttribute",
  336. "assembly": "mscorlib"
  337. },
  338. {
  339. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  340. "assembly": "mscorlib"
  341. },
  342. {
  343. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  344. "assembly": "mscorlib"
  345. },
  346. {
  347. "typename": "System.EventArgs",
  348. "assembly": "mscorlib"
  349. },
  350. {
  351. "typename": "System.EventHandler",
  352. "assembly": "mscorlib"
  353. },
  354. {
  355. "typename": "System.Globalization.CultureInfo",
  356. "assembly": "mscorlib"
  357. },
  358. {
  359. "typename": "System.IDisposable",
  360. "assembly": "mscorlib"
  361. },
  362. {
  363. "typename": "System.Math",
  364. "assembly": "mscorlib"
  365. },
  366. {
  367. "typename": "System.Object",
  368. "assembly": "mscorlib"
  369. },
  370. {
  371. "typename": "System.Reflection.Assembly",
  372. "assembly": "mscorlib"
  373. },
  374. {
  375. "typename": "System.Reflection.AssemblyCompanyAttribute",
  376. "assembly": "mscorlib"
  377. },
  378. {
  379. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  380. "assembly": "mscorlib"
  381. },
  382. {
  383. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  384. "assembly": "mscorlib"
  385. },
  386. {
  387. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  388. "assembly": "mscorlib"
  389. },
  390. {
  391. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  392. "assembly": "mscorlib"
  393. },
  394. {
  395. "typename": "System.Reflection.AssemblyProductAttribute",
  396. "assembly": "mscorlib"
  397. },
  398. {
  399. "typename": "System.Reflection.AssemblyTitleAttribute",
  400. "assembly": "mscorlib"
  401. },
  402. {
  403. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  404. "assembly": "mscorlib"
  405. },
  406. {
  407. "typename": "System.Resources.ResourceManager",
  408. "assembly": "mscorlib"
  409. },
  410. {
  411. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  412. "assembly": "mscorlib"
  413. },
  414. {
  415. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  416. "assembly": "mscorlib"
  417. },
  418. {
  419. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  420. "assembly": "mscorlib"
  421. },
  422. {
  423. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  424. "assembly": "mscorlib"
  425. },
  426. {
  427. "typename": "System.Runtime.InteropServices.GuidAttribute",
  428. "assembly": "mscorlib"
  429. },
  430. {
  431. "typename": "System.RuntimeTypeHandle",
  432. "assembly": "mscorlib"
  433. },
  434. {
  435. "typename": "System.STAThreadAttribute",
  436. "assembly": "mscorlib"
  437. },
  438. {
  439. "typename": "System.String",
  440. "assembly": "mscorlib"
  441. },
  442. {
  443. "typename": "System.Type",
  444. "assembly": "mscorlib"
  445. }
  446. ]
  447. },
  448. "pe": {
  449. "peid_signatures": null,
  450. "imports": [
  451. {
  452. "imports": [
  453. {
  454. "name": "_CorExeMain",
  455. "address": "0x402000"
  456. }
  457. ],
  458. "dll": "mscoree.dll"
  459. }
  460. ],
  461. "digital_signers": null,
  462. "exported_dll_name": null,
  463. "actual_checksum": "0x00066d5c",
  464. "overlay": null,
  465. "imagebase": "0x00400000",
  466. "reported_checksum": "0x00000000",
  467. "icon_hash": null,
  468. "entrypoint": "0x0046676e",
  469. "timestamp": "2019-07-01 22:45:20",
  470. "osversion": "4.0",
  471. "sections": [
  472. {
  473. "name": ".text",
  474. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  475. "virtual_address": "0x00002000",
  476. "size_of_data": "0x00064800",
  477. "entropy": "7.84",
  478. "raw_address": "0x00000200",
  479. "virtual_size": "0x00064774",
  480. "characteristics_raw": "0x60000020"
  481. },
  482. {
  483. "name": ".rsrc",
  484. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  485. "virtual_address": "0x00068000",
  486. "size_of_data": "0x00000800",
  487. "entropy": "3.56",
  488. "raw_address": "0x00064a00",
  489. "virtual_size": "0x00000800",
  490. "characteristics_raw": "0x40000040"
  491. },
  492. {
  493. "name": ".reloc",
  494. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  495. "virtual_address": "0x0006a000",
  496. "size_of_data": "0x00000200",
  497. "entropy": "0.10",
  498. "raw_address": "0x00065200",
  499. "virtual_size": "0x0000000c",
  500. "characteristics_raw": "0x42000040"
  501. }
  502. ],
  503. "resources": [],
  504. "dirents": [
  505. {
  506. "virtual_address": "0x00000000",
  507. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  508. "size": "0x00000000"
  509. },
  510. {
  511. "virtual_address": "0x00066720",
  512. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  513. "size": "0x0000004b"
  514. },
  515. {
  516. "virtual_address": "0x00068000",
  517. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  518. "size": "0x00000800"
  519. },
  520. {
  521. "virtual_address": "0x00000000",
  522. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  523. "size": "0x00000000"
  524. },
  525. {
  526. "virtual_address": "0x00000000",
  527. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  528. "size": "0x00000000"
  529. },
  530. {
  531. "virtual_address": "0x0006a000",
  532. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  533. "size": "0x0000000c"
  534. },
  535. {
  536. "virtual_address": "0x00000000",
  537. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  538. "size": "0x00000000"
  539. },
  540. {
  541. "virtual_address": "0x00000000",
  542. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  543. "size": "0x00000000"
  544. },
  545. {
  546. "virtual_address": "0x00000000",
  547. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  548. "size": "0x00000000"
  549. },
  550. {
  551. "virtual_address": "0x00000000",
  552. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  553. "size": "0x00000000"
  554. },
  555. {
  556. "virtual_address": "0x00000000",
  557. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  558. "size": "0x00000000"
  559. },
  560. {
  561. "virtual_address": "0x00000000",
  562. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  563. "size": "0x00000000"
  564. },
  565. {
  566. "virtual_address": "0x00002000",
  567. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  568. "size": "0x00000008"
  569. },
  570. {
  571. "virtual_address": "0x00000000",
  572. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  573. "size": "0x00000000"
  574. },
  575. {
  576. "virtual_address": "0x00002008",
  577. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  578. "size": "0x00000048"
  579. },
  580. {
  581. "virtual_address": "0x00000000",
  582. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  583. "size": "0x00000000"
  584. }
  585. ],
  586. "exports": [],
  587. "guest_signers": {},
  588. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  589. "icon_fuzzy": null,
  590. "icon": null,
  591. "pdbpath": null,
  592. "imported_dll_count": 1,
  593. "versioninfo": []
  594. }
  595. }
  596.  
  597. [*] Resolved APIs: []
  598.  
  599. [*] Static Analysis: {
  600. "dotnet": {
  601. "customattrs": null,
  602. "assemblyinfo": {
  603. "version": "10.6.4.17",
  604. "name": "n1uqQnXO2PcM"
  605. },
  606. "assemblyrefs": [
  607. {
  608. "version": "2.0.0.0",
  609. "name": "mscorlib"
  610. },
  611. {
  612. "version": "2.0.0.0",
  613. "name": "System.Windows.Forms"
  614. },
  615. {
  616. "version": "2.0.0.0",
  617. "name": "System"
  618. },
  619. {
  620. "version": "2.0.0.0",
  621. "name": "System.Drawing"
  622. },
  623. {
  624. "version": "8.0.0.0",
  625. "name": "Microsoft.VisualBasic"
  626. }
  627. ],
  628. "typerefs": [
  629. {
  630. "typename": "Microsoft.VisualBasic.CompilerServices.LateBinding",
  631. "assembly": "Microsoft.VisualBasic"
  632. },
  633. {
  634. "typename": "System.CodeDom.Compiler.GeneratedCodeAttribute",
  635. "assembly": "System"
  636. },
  637. {
  638. "typename": "System.ComponentModel.Component",
  639. "assembly": "System"
  640. },
  641. {
  642. "typename": "System.ComponentModel.ComponentResourceManager",
  643. "assembly": "System"
  644. },
  645. {
  646. "typename": "System.ComponentModel.Container",
  647. "assembly": "System"
  648. },
  649. {
  650. "typename": "System.ComponentModel.EditorBrowsableAttribute",
  651. "assembly": "System"
  652. },
  653. {
  654. "typename": "System.ComponentModel.EditorBrowsableState",
  655. "assembly": "System"
  656. },
  657. {
  658. "typename": "System.ComponentModel.IComponent",
  659. "assembly": "System"
  660. },
  661. {
  662. "typename": "System.ComponentModel.IContainer",
  663. "assembly": "System"
  664. },
  665. {
  666. "typename": "System.Configuration.ApplicationSettingsBase",
  667. "assembly": "System"
  668. },
  669. {
  670. "typename": "System.Configuration.SettingsBase",
  671. "assembly": "System"
  672. },
  673. {
  674. "typename": "System.Drawing.Bitmap",
  675. "assembly": "System.Drawing"
  676. },
  677. {
  678. "typename": "System.Drawing.Color",
  679. "assembly": "System.Drawing"
  680. },
  681. {
  682. "typename": "System.Drawing.Font",
  683. "assembly": "System.Drawing"
  684. },
  685. {
  686. "typename": "System.Drawing.FontStyle",
  687. "assembly": "System.Drawing"
  688. },
  689. {
  690. "typename": "System.Drawing.GraphicsUnit",
  691. "assembly": "System.Drawing"
  692. },
  693. {
  694. "typename": "System.Drawing.Icon",
  695. "assembly": "System.Drawing"
  696. },
  697. {
  698. "typename": "System.Drawing.Image",
  699. "assembly": "System.Drawing"
  700. },
  701. {
  702. "typename": "System.Drawing.Point",
  703. "assembly": "System.Drawing"
  704. },
  705. {
  706. "typename": "System.Drawing.Size",
  707. "assembly": "System.Drawing"
  708. },
  709. {
  710. "typename": "System.Drawing.SizeF",
  711. "assembly": "System.Drawing"
  712. },
  713. {
  714. "typename": "System.Windows.Forms.Application",
  715. "assembly": "System.Windows.Forms"
  716. },
  717. {
  718. "typename": "System.Windows.Forms.AutoScaleMode",
  719. "assembly": "System.Windows.Forms"
  720. },
  721. {
  722. "typename": "System.Windows.Forms.Button",
  723. "assembly": "System.Windows.Forms"
  724. },
  725. {
  726. "typename": "System.Windows.Forms.ButtonBase",
  727. "assembly": "System.Windows.Forms"
  728. },
  729. {
  730. "typename": "System.Windows.Forms.ContainerControl",
  731. "assembly": "System.Windows.Forms"
  732. },
  733. {
  734. "typename": "System.Windows.Forms.Control",
  735. "assembly": "System.Windows.Forms"
  736. },
  737. {
  738. "typename": "System.Windows.Forms.Control/ControlCollection",
  739. "assembly": "System.Windows.Forms"
  740. },
  741. {
  742. "typename": "System.Windows.Forms.FlatStyle",
  743. "assembly": "System.Windows.Forms"
  744. },
  745. {
  746. "typename": "System.Windows.Forms.Form",
  747. "assembly": "System.Windows.Forms"
  748. },
  749. {
  750. "typename": "System.Windows.Forms.FormBorderStyle",
  751. "assembly": "System.Windows.Forms"
  752. },
  753. {
  754. "typename": "System.Windows.Forms.FormStartPosition",
  755. "assembly": "System.Windows.Forms"
  756. },
  757. {
  758. "typename": "System.Windows.Forms.Label",
  759. "assembly": "System.Windows.Forms"
  760. },
  761. {
  762. "typename": "System.Windows.Forms.RadioButton",
  763. "assembly": "System.Windows.Forms"
  764. },
  765. {
  766. "typename": "System.Windows.Forms.TextBox",
  767. "assembly": "System.Windows.Forms"
  768. },
  769. {
  770. "typename": "System.Windows.Forms.TextBoxBase",
  771. "assembly": "System.Windows.Forms"
  772. },
  773. {
  774. "typename": "System.Windows.Forms.UserControl",
  775. "assembly": "System.Windows.Forms"
  776. },
  777. {
  778. "typename": "System.AppDomain",
  779. "assembly": "mscorlib"
  780. },
  781. {
  782. "typename": "System.Array",
  783. "assembly": "mscorlib"
  784. },
  785. {
  786. "typename": "System.Buffer",
  787. "assembly": "mscorlib"
  788. },
  789. {
  790. "typename": "System.Byte",
  791. "assembly": "mscorlib"
  792. },
  793. {
  794. "typename": "System.Collections.ArrayList",
  795. "assembly": "mscorlib"
  796. },
  797. {
  798. "typename": "System.Collections.ICollection",
  799. "assembly": "mscorlib"
  800. },
  801. {
  802. "typename": "System.Convert",
  803. "assembly": "mscorlib"
  804. },
  805. {
  806. "typename": "System.Diagnostics.DebuggableAttribute",
  807. "assembly": "mscorlib"
  808. },
  809. {
  810. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  811. "assembly": "mscorlib"
  812. },
  813. {
  814. "typename": "System.Diagnostics.DebuggerNonUserCodeAttribute",
  815. "assembly": "mscorlib"
  816. },
  817. {
  818. "typename": "System.EventArgs",
  819. "assembly": "mscorlib"
  820. },
  821. {
  822. "typename": "System.EventHandler",
  823. "assembly": "mscorlib"
  824. },
  825. {
  826. "typename": "System.Globalization.CultureInfo",
  827. "assembly": "mscorlib"
  828. },
  829. {
  830. "typename": "System.IDisposable",
  831. "assembly": "mscorlib"
  832. },
  833. {
  834. "typename": "System.Math",
  835. "assembly": "mscorlib"
  836. },
  837. {
  838. "typename": "System.Object",
  839. "assembly": "mscorlib"
  840. },
  841. {
  842. "typename": "System.Reflection.Assembly",
  843. "assembly": "mscorlib"
  844. },
  845. {
  846. "typename": "System.Reflection.AssemblyCompanyAttribute",
  847. "assembly": "mscorlib"
  848. },
  849. {
  850. "typename": "System.Reflection.AssemblyConfigurationAttribute",
  851. "assembly": "mscorlib"
  852. },
  853. {
  854. "typename": "System.Reflection.AssemblyCopyrightAttribute",
  855. "assembly": "mscorlib"
  856. },
  857. {
  858. "typename": "System.Reflection.AssemblyDescriptionAttribute",
  859. "assembly": "mscorlib"
  860. },
  861. {
  862. "typename": "System.Reflection.AssemblyFileVersionAttribute",
  863. "assembly": "mscorlib"
  864. },
  865. {
  866. "typename": "System.Reflection.AssemblyProductAttribute",
  867. "assembly": "mscorlib"
  868. },
  869. {
  870. "typename": "System.Reflection.AssemblyTitleAttribute",
  871. "assembly": "mscorlib"
  872. },
  873. {
  874. "typename": "System.Reflection.AssemblyTrademarkAttribute",
  875. "assembly": "mscorlib"
  876. },
  877. {
  878. "typename": "System.Resources.ResourceManager",
  879. "assembly": "mscorlib"
  880. },
  881. {
  882. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  883. "assembly": "mscorlib"
  884. },
  885. {
  886. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  887. "assembly": "mscorlib"
  888. },
  889. {
  890. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  891. "assembly": "mscorlib"
  892. },
  893. {
  894. "typename": "System.Runtime.InteropServices.ComVisibleAttribute",
  895. "assembly": "mscorlib"
  896. },
  897. {
  898. "typename": "System.Runtime.InteropServices.GuidAttribute",
  899. "assembly": "mscorlib"
  900. },
  901. {
  902. "typename": "System.RuntimeTypeHandle",
  903. "assembly": "mscorlib"
  904. },
  905. {
  906. "typename": "System.STAThreadAttribute",
  907. "assembly": "mscorlib"
  908. },
  909. {
  910. "typename": "System.String",
  911. "assembly": "mscorlib"
  912. },
  913. {
  914. "typename": "System.Type",
  915. "assembly": "mscorlib"
  916. }
  917. ]
  918. },
  919. "pe": {
  920. "peid_signatures": null,
  921. "imports": [
  922. {
  923. "imports": [
  924. {
  925. "name": "_CorExeMain",
  926. "address": "0x402000"
  927. }
  928. ],
  929. "dll": "mscoree.dll"
  930. }
  931. ],
  932. "digital_signers": null,
  933. "exported_dll_name": null,
  934. "actual_checksum": "0x00066d5c",
  935. "overlay": null,
  936. "imagebase": "0x00400000",
  937. "reported_checksum": "0x00000000",
  938. "icon_hash": null,
  939. "entrypoint": "0x0046676e",
  940. "timestamp": "2019-07-01 22:45:20",
  941. "osversion": "4.0",
  942. "sections": [
  943. {
  944. "name": ".text",
  945. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  946. "virtual_address": "0x00002000",
  947. "size_of_data": "0x00064800",
  948. "entropy": "7.84",
  949. "raw_address": "0x00000200",
  950. "virtual_size": "0x00064774",
  951. "characteristics_raw": "0x60000020"
  952. },
  953. {
  954. "name": ".rsrc",
  955. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  956. "virtual_address": "0x00068000",
  957. "size_of_data": "0x00000800",
  958. "entropy": "3.56",
  959. "raw_address": "0x00064a00",
  960. "virtual_size": "0x00000800",
  961. "characteristics_raw": "0x40000040"
  962. },
  963. {
  964. "name": ".reloc",
  965. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  966. "virtual_address": "0x0006a000",
  967. "size_of_data": "0x00000200",
  968. "entropy": "0.10",
  969. "raw_address": "0x00065200",
  970. "virtual_size": "0x0000000c",
  971. "characteristics_raw": "0x42000040"
  972. }
  973. ],
  974. "resources": [],
  975. "dirents": [
  976. {
  977. "virtual_address": "0x00000000",
  978. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  979. "size": "0x00000000"
  980. },
  981. {
  982. "virtual_address": "0x00066720",
  983. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  984. "size": "0x0000004b"
  985. },
  986. {
  987. "virtual_address": "0x00068000",
  988. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  989. "size": "0x00000800"
  990. },
  991. {
  992. "virtual_address": "0x00000000",
  993. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  994. "size": "0x00000000"
  995. },
  996. {
  997. "virtual_address": "0x00000000",
  998. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  999. "size": "0x00000000"
  1000. },
  1001. {
  1002. "virtual_address": "0x0006a000",
  1003. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1004. "size": "0x0000000c"
  1005. },
  1006. {
  1007. "virtual_address": "0x00000000",
  1008. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1009. "size": "0x00000000"
  1010. },
  1011. {
  1012. "virtual_address": "0x00000000",
  1013. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1014. "size": "0x00000000"
  1015. },
  1016. {
  1017. "virtual_address": "0x00000000",
  1018. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1019. "size": "0x00000000"
  1020. },
  1021. {
  1022. "virtual_address": "0x00000000",
  1023. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1024. "size": "0x00000000"
  1025. },
  1026. {
  1027. "virtual_address": "0x00000000",
  1028. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1029. "size": "0x00000000"
  1030. },
  1031. {
  1032. "virtual_address": "0x00000000",
  1033. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1034. "size": "0x00000000"
  1035. },
  1036. {
  1037. "virtual_address": "0x00002000",
  1038. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1039. "size": "0x00000008"
  1040. },
  1041. {
  1042. "virtual_address": "0x00000000",
  1043. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1044. "size": "0x00000000"
  1045. },
  1046. {
  1047. "virtual_address": "0x00002008",
  1048. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1049. "size": "0x00000048"
  1050. },
  1051. {
  1052. "virtual_address": "0x00000000",
  1053. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1054. "size": "0x00000000"
  1055. }
  1056. ],
  1057. "exports": [],
  1058. "guest_signers": {},
  1059. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  1060. "icon_fuzzy": null,
  1061. "icon": null,
  1062. "pdbpath": null,
  1063. "imported_dll_count": 1,
  1064. "versioninfo": []
  1065. }
  1066. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!