API tools faq
paste
paladin316

Exes_1aa7d737a67c6969bdd35e1e81d51179_exe_2019-06-30_18_30.json

paladin316
Jun 30th, 2019
2,193
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.77 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_1aa7d737a67c6969bdd35e1e81d51179.exe"
  7. [*] File Size: 4202496
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. [*] SHA256: "c39dd5304cc0deb6ad960b67f49511a6766d9462828d232c817621f4f7d4a52e"
  10. [*] MD5: "1aa7d737a67c6969bdd35e1e81d51179"
  11. [*] SHA1: "4b66a1526f4e5ffde1400a00cfafed86cc8cadce"
  12. [*] SHA512: "051490298940b8400029bb1883046202677188a8ee9e5be99724c3dcd9402cf2386e198eee41006e5d31e0a6440c1afadc65636726feed57461f9927fdce21cc"
  13. [*] CRC32: "A79C5F63"
  14. [*] SSDEEP: "98304:5CNkUGua5W3WxqLNvNF02sS7EydUZuaRwMktTq9yqzR:hUi5Ns5TzsS7XUVwMMg"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: \\x00 , entropy: 7.70, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x0000e000, virtual_size: 0x00030000"
  24. },
  25. {
  26. "section": "name: eoyzjfvc, entropy: 7.94, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x0025b000, virtual_size: 0x0025b000"
  27. }
  28. ]
  29. },
  30. {
  31. "Description": "File has been identified by 46 Antiviruses on VirusTotal as malicious",
  32. "Details": [
  33. {
  34. "MicroWorld-eScan": "Trojan.GenericKD.12403219"
  35. },
  36. {
  37. "CAT-QuickHeal": "Trojan.Generic"
  38. },
  39. {
  40. "McAfee": "Artemis!1AA7D737A67C"
  41. },
  42. {
  43. "Malwarebytes": "Backdoor.Bot"
  44. },
  45. {
  46. "K7GW": "Trojan ( 0051ad601 )"
  47. },
  48. {
  49. "K7AntiVirus": "Trojan ( 0051ad601 )"
  50. },
  51. {
  52. "Arcabit": "Trojan.Generic.DBD4213"
  53. },
  54. {
  55. "NANO-Antivirus": "Trojan.Win32.AVKill.esxxws"
  56. },
  57. {
  58. "Cyren": "W32/Agent.AOI.gen!Eldorado"
  59. },
  60. {
  61. "Symantec": "ML.Attribute.HighConfidence"
  62. },
  63. {
  64. "ESET-NOD32": "a variant of Win32/GenKryptik.AWDU"
  65. },
  66. {
  67. "Avast": "Win32:Evo-gen [Susp]"
  68. },
  69. {
  70. "Kaspersky": "HEUR:Trojan.Win32.Generic"
  71. },
  72. {
  73. "BitDefender": "Trojan.GenericKD.12403219"
  74. },
  75. {
  76. "Paloalto": "generic.ml"
  77. },
  78. {
  79. "Endgame": "malicious (high confidence)"
  80. },
  81. {
  82. "Emsisoft": "Trojan.GenericKD.12403219 (B)"
  83. },
  84. {
  85. "F-Secure": "Heuristic.HEUR/AGEN.1028485"
  86. },
  87. {
  88. "DrWeb": "Trojan.AVKill.63348"
  89. },
  90. {
  91. "VIPRE": "Trojan.Win32.Generic!BT"
  92. },
  93. {
  94. "Invincea": "heuristic"
  95. },
  96. {
  97. "McAfee-GW-Edition": "BehavesLike.Win32.Trojan.rc"
  98. },
  99. {
  100. "Trapmine": "malicious.moderate.ml.score"
  101. },
  102. {
  103. "Sophos": "Mal/Generic-S"
  104. },
  105. {
  106. "SentinelOne": "static engine - malicious"
  107. },
  108. {
  109. "Jiangmin": "Trojan.Generic.bjwco"
  110. },
  111. {
  112. "Webroot": "W32.Suspicious.Heur"
  113. },
  114. {
  115. "Avira": "HEUR/AGEN.1028485"
  116. },
  117. {
  118. "Antiy-AVL": "Trojan/Win32.AGeneric"
  119. },
  120. {
  121. "Microsoft": "VirTool:Win32/VBInject"
  122. },
  123. {
  124. "ZoneAlarm": "HEUR:Trojan.Win32.Generic"
  125. },
  126. {
  127. "GData": "Trojan.GenericKD.12403219"
  128. },
  129. {
  130. "AhnLab-V3": "Trojan/Win32.Agent.C2102421"
  131. },
  132. {
  133. "Acronis": "suspicious"
  134. },
  135. {
  136. "ALYac": "Trojan.GenericKD.31715057"
  137. },
  138. {
  139. "MAX": "malware (ai score=99)"
  140. },
  141. {
  142. "VBA32": "Trojan.Pakes"
  143. },
  144. {
  145. "Yandex": "Trojan.GenKryptik!"
  146. },
  147. {
  148. "Ikarus": "Trojan.Win32.Krypt"
  149. },
  150. {
  151. "Fortinet": "W32/Generic.AWDU!tr"
  152. },
  153. {
  154. "Ad-Aware": "Trojan.GenericKD.12403219"
  155. },
  156. {
  157. "AVG": "FileRepMetagen [Malware]"
  158. },
  159. {
  160. "Cybereason": "malicious.7a67c6"
  161. },
  162. {
  163. "Panda": "Trj/GdSda.A"
  164. },
  165. {
  166. "CrowdStrike": "win/malicious_confidence_90% (W)"
  167. },
  168. {
  169. "Qihoo-360": "HEUR/QVM19.1.851F.Malware.Gen"
  170. }
  171. ]
  172. },
  173. {
  174. "Description": "Anomalous binary characteristics",
  175. "Details": [
  176. {
  177. "anomaly": "Found duplicated section names"
  178. },
  179. {
  180. "anomaly": "Unprintable characters found in section name"
  181. },
  182. {
  183. "anomaly": "Actual checksum does not match that reported in PE header"
  184. }
  185. ]
  186. }
  187. ]
  188.  
  189. [*] Started Service: []
  190.  
  191. [*] Executed Commands: []
  192.  
  193. [*] Mutexes: []
  194.  
  195. [*] Modified Files: []
  196.  
  197. [*] Deleted Files: []
  198.  
  199. [*] Modified Registry Keys: []
  200.  
  201. [*] Deleted Registry Keys: []
  202.  
  203. [*] DNS Communications: []
  204.  
  205. [*] Domains: []
  206.  
  207. [*] Network Communication - ICMP: []
  208.  
  209. [*] Network Communication - HTTP: []
  210.  
  211. [*] Network Communication - SMTP: []
  212.  
  213. [*] Network Communication - Hosts: []
  214.  
  215. [*] Network Communication - IRC: []
  216.  
  217. [*] Static Analysis: {
  218. "pe": {
  219. "peid_signatures": null,
  220. "imports": [
  221. {
  222. "imports": [
  223. {
  224. "name": "GetProcessHeap",
  225. "address": "0x5c50fc"
  226. },
  227. {
  228. "name": "GetVersionExA",
  229. "address": "0x5c5100"
  230. },
  231. {
  232. "name": "HeapAlloc",
  233. "address": "0x5c5104"
  234. },
  235. {
  236. "name": "GetModuleHandleA",
  237. "address": "0x5c5108"
  238. },
  239. {
  240. "name": "LoadLibraryA",
  241. "address": "0x5c510c"
  242. },
  243. {
  244. "name": "VirtualAlloc",
  245. "address": "0x5c5110"
  246. },
  247. {
  248. "name": "VirtualFree",
  249. "address": "0x5c5114"
  250. },
  251. {
  252. "name": "GetCurrentThreadId",
  253. "address": "0x5c5118"
  254. },
  255. {
  256. "name": "GetCommandLineA",
  257. "address": "0x5c511c"
  258. },
  259. {
  260. "name": "HeapFree",
  261. "address": "0x5c5120"
  262. },
  263. {
  264. "name": "FreeLibrary",
  265. "address": "0x5c5124"
  266. }
  267. ],
  268. "dll": "KERNEL32"
  269. },
  270. {
  271. "imports": [
  272. {
  273. "name": "MessageBoxA",
  274. "address": "0x5c512c"
  275. }
  276. ],
  277. "dll": "USER32"
  278. },
  279. {
  280. "imports": [
  281. {
  282. "name": "ImmSetCompositionWindow",
  283. "address": "0x5c5134"
  284. }
  285. ],
  286. "dll": "IMM32"
  287. },
  288. {
  289. "imports": [
  290. {
  291. "name": "ImageList_EndDrag",
  292. "address": "0x5c513c"
  293. }
  294. ],
  295. "dll": "COMCTL32"
  296. }
  297. ],
  298. "digital_signers": null,
  299. "exported_dll_name": null,
  300. "actual_checksum": "0x00411dd5",
  301. "overlay": null,
  302. "imagebase": "0x00400000",
  303. "reported_checksum": "0x0040d196",
  304. "icon_hash": null,
  305. "entrypoint": "0x00b3c000",
  306. "timestamp": "2017-07-30 08:40:46",
  307. "osversion": "4.0",
  308. "sections": [
  309. {
  310. "name": " \\x00 ",
  311. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  312. "virtual_address": "0x00001000",
  313. "size_of_data": "0x0000e000",
  314. "entropy": "7.70",
  315. "raw_address": "0x00001000",
  316. "virtual_size": "0x00030000",
  317. "characteristics_raw": "0xe0000040"
  318. },
  319. {
  320. "name": ".rsrc",
  321. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  322. "virtual_address": "0x00031000",
  323. "size_of_data": "0x00194000",
  324. "entropy": "6.47",
  325. "raw_address": "0x0000f000",
  326. "virtual_size": "0x00193b68",
  327. "characteristics_raw": "0xc0000040"
  328. },
  329. {
  330. "name": ".idata ",
  331. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  332. "virtual_address": "0x001c5000",
  333. "size_of_data": "0x00001000",
  334. "entropy": "0.84",
  335. "raw_address": "0x001a3000",
  336. "virtual_size": "0x00001000",
  337. "characteristics_raw": "0xc0000040"
  338. },
  339. {
  340. "name": " ",
  341. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  342. "virtual_address": "0x001c6000",
  343. "size_of_data": "0x00001000",
  344. "entropy": "0.04",
  345. "raw_address": "0x001a4000",
  346. "virtual_size": "0x0031a000",
  347. "characteristics_raw": "0xe0000040"
  348. },
  349. {
  350. "name": "eoyzjfvc",
  351. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  352. "virtual_address": "0x004e0000",
  353. "size_of_data": "0x0025b000",
  354. "entropy": "7.94",
  355. "raw_address": "0x001a5000",
  356. "virtual_size": "0x0025b000",
  357. "characteristics_raw": "0xe0000040"
  358. },
  359. {
  360. "name": "ornbkkna",
  361. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  362. "virtual_address": "0x0073b000",
  363. "size_of_data": "0x00001000",
  364. "entropy": "1.93",
  365. "raw_address": "0x00400000",
  366. "virtual_size": "0x00001000",
  367. "characteristics_raw": "0xe0000040"
  368. },
  369. {
  370. "name": "ornbkkna",
  371. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  372. "virtual_address": "0x0073c000",
  373. "size_of_data": "0x00001000",
  374. "entropy": "2.13",
  375. "raw_address": "0x00401000",
  376. "virtual_size": "0x00001000",
  377. "characteristics_raw": "0xe0000040"
  378. },
  379. {
  380. "name": ".data\\x00Un",
  381. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  382. "virtual_address": "0x0073d000",
  383. "size_of_data": "0x00000000",
  384. "entropy": "0.00",
  385. "raw_address": "0x00402000",
  386. "virtual_size": "0x00001000",
  387. "characteristics_raw": "0xe0000040"
  388. }
  389. ],
  390. "resources": [],
  391. "dirents": [
  392. {
  393. "virtual_address": "0x00000000",
  394. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  395. "size": "0x00000000"
  396. },
  397. {
  398. "virtual_address": "0x001c51bb",
  399. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  400. "size": "0x0000020b"
  401. },
  402. {
  403. "virtual_address": "0x00031000",
  404. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  405. "size": "0x00193b68"
  406. },
  407. {
  408. "virtual_address": "0x00000000",
  409. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  410. "size": "0x00000000"
  411. },
  412. {
  413. "virtual_address": "0x00000000",
  414. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  415. "size": "0x00000000"
  416. },
  417. {
  418. "virtual_address": "0x00000000",
  419. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  420. "size": "0x00000000"
  421. },
  422. {
  423. "virtual_address": "0x00000000",
  424. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  425. "size": "0x00000000"
  426. },
  427. {
  428. "virtual_address": "0x00000000",
  429. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  430. "size": "0x00000000"
  431. },
  432. {
  433. "virtual_address": "0x00000000",
  434. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  435. "size": "0x00000000"
  436. },
  437. {
  438. "virtual_address": "0x00000000",
  439. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  440. "size": "0x00000000"
  441. },
  442. {
  443. "virtual_address": "0x00000000",
  444. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  445. "size": "0x00000000"
  446. },
  447. {
  448. "virtual_address": "0x00000000",
  449. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  450. "size": "0x00000000"
  451. },
  452. {
  453. "virtual_address": "0x00000000",
  454. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  455. "size": "0x00000000"
  456. },
  457. {
  458. "virtual_address": "0x00000000",
  459. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  460. "size": "0x00000000"
  461. },
  462. {
  463. "virtual_address": "0x00000000",
  464. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  465. "size": "0x00000000"
  466. },
  467. {
  468. "virtual_address": "0x00000000",
  469. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  470. "size": "0x00000000"
  471. }
  472. ],
  473. "exports": [],
  474. "guest_signers": {},
  475. "imphash": "b1e9998745df82818b92e921a2a75e35",
  476. "icon_fuzzy": null,
  477. "icon": null,
  478. "pdbpath": null,
  479. "imported_dll_count": 4,
  480. "versioninfo": []
  481. }
  482. }
  483.  
  484. [*] Resolved APIs: []
  485.  
  486. [*] Static Analysis: {
  487. "pe": {
  488. "peid_signatures": null,
  489. "imports": [
  490. {
  491. "imports": [
  492. {
  493. "name": "GetProcessHeap",
  494. "address": "0x5c50fc"
  495. },
  496. {
  497. "name": "GetVersionExA",
  498. "address": "0x5c5100"
  499. },
  500. {
  501. "name": "HeapAlloc",
  502. "address": "0x5c5104"
  503. },
  504. {
  505. "name": "GetModuleHandleA",
  506. "address": "0x5c5108"
  507. },
  508. {
  509. "name": "LoadLibraryA",
  510. "address": "0x5c510c"
  511. },
  512. {
  513. "name": "VirtualAlloc",
  514. "address": "0x5c5110"
  515. },
  516. {
  517. "name": "VirtualFree",
  518. "address": "0x5c5114"
  519. },
  520. {
  521. "name": "GetCurrentThreadId",
  522. "address": "0x5c5118"
  523. },
  524. {
  525. "name": "GetCommandLineA",
  526. "address": "0x5c511c"
  527. },
  528. {
  529. "name": "HeapFree",
  530. "address": "0x5c5120"
  531. },
  532. {
  533. "name": "FreeLibrary",
  534. "address": "0x5c5124"
  535. }
  536. ],
  537. "dll": "KERNEL32"
  538. },
  539. {
  540. "imports": [
  541. {
  542. "name": "MessageBoxA",
  543. "address": "0x5c512c"
  544. }
  545. ],
  546. "dll": "USER32"
  547. },
  548. {
  549. "imports": [
  550. {
  551. "name": "ImmSetCompositionWindow",
  552. "address": "0x5c5134"
  553. }
  554. ],
  555. "dll": "IMM32"
  556. },
  557. {
  558. "imports": [
  559. {
  560. "name": "ImageList_EndDrag",
  561. "address": "0x5c513c"
  562. }
  563. ],
  564. "dll": "COMCTL32"
  565. }
  566. ],
  567. "digital_signers": null,
  568. "exported_dll_name": null,
  569. "actual_checksum": "0x00411dd5",
  570. "overlay": null,
  571. "imagebase": "0x00400000",
  572. "reported_checksum": "0x0040d196",
  573. "icon_hash": null,
  574. "entrypoint": "0x00b3c000",
  575. "timestamp": "2017-07-30 08:40:46",
  576. "osversion": "4.0",
  577. "sections": [
  578. {
  579. "name": " \\x00 ",
  580. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  581. "virtual_address": "0x00001000",
  582. "size_of_data": "0x0000e000",
  583. "entropy": "7.70",
  584. "raw_address": "0x00001000",
  585. "virtual_size": "0x00030000",
  586. "characteristics_raw": "0xe0000040"
  587. },
  588. {
  589. "name": ".rsrc",
  590. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  591. "virtual_address": "0x00031000",
  592. "size_of_data": "0x00194000",
  593. "entropy": "6.47",
  594. "raw_address": "0x0000f000",
  595. "virtual_size": "0x00193b68",
  596. "characteristics_raw": "0xc0000040"
  597. },
  598. {
  599. "name": ".idata ",
  600. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  601. "virtual_address": "0x001c5000",
  602. "size_of_data": "0x00001000",
  603. "entropy": "0.84",
  604. "raw_address": "0x001a3000",
  605. "virtual_size": "0x00001000",
  606. "characteristics_raw": "0xc0000040"
  607. },
  608. {
  609. "name": " ",
  610. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  611. "virtual_address": "0x001c6000",
  612. "size_of_data": "0x00001000",
  613. "entropy": "0.04",
  614. "raw_address": "0x001a4000",
  615. "virtual_size": "0x0031a000",
  616. "characteristics_raw": "0xe0000040"
  617. },
  618. {
  619. "name": "eoyzjfvc",
  620. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  621. "virtual_address": "0x004e0000",
  622. "size_of_data": "0x0025b000",
  623. "entropy": "7.94",
  624. "raw_address": "0x001a5000",
  625. "virtual_size": "0x0025b000",
  626. "characteristics_raw": "0xe0000040"
  627. },
  628. {
  629. "name": "ornbkkna",
  630. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  631. "virtual_address": "0x0073b000",
  632. "size_of_data": "0x00001000",
  633. "entropy": "1.93",
  634. "raw_address": "0x00400000",
  635. "virtual_size": "0x00001000",
  636. "characteristics_raw": "0xe0000040"
  637. },
  638. {
  639. "name": "ornbkkna",
  640. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  641. "virtual_address": "0x0073c000",
  642. "size_of_data": "0x00001000",
  643. "entropy": "2.13",
  644. "raw_address": "0x00401000",
  645. "virtual_size": "0x00001000",
  646. "characteristics_raw": "0xe0000040"
  647. },
  648. {
  649. "name": ".data\\x00Un",
  650. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  651. "virtual_address": "0x0073d000",
  652. "size_of_data": "0x00000000",
  653. "entropy": "0.00",
  654. "raw_address": "0x00402000",
  655. "virtual_size": "0x00001000",
  656. "characteristics_raw": "0xe0000040"
  657. }
  658. ],
  659. "resources": [],
  660. "dirents": [
  661. {
  662. "virtual_address": "0x00000000",
  663. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  664. "size": "0x00000000"
  665. },
  666. {
  667. "virtual_address": "0x001c51bb",
  668. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  669. "size": "0x0000020b"
  670. },
  671. {
  672. "virtual_address": "0x00031000",
  673. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  674. "size": "0x00193b68"
  675. },
  676. {
  677. "virtual_address": "0x00000000",
  678. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  679. "size": "0x00000000"
  680. },
  681. {
  682. "virtual_address": "0x00000000",
  683. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  684. "size": "0x00000000"
  685. },
  686. {
  687. "virtual_address": "0x00000000",
  688. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  689. "size": "0x00000000"
  690. },
  691. {
  692. "virtual_address": "0x00000000",
  693. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  694. "size": "0x00000000"
  695. },
  696. {
  697. "virtual_address": "0x00000000",
  698. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  699. "size": "0x00000000"
  700. },
  701. {
  702. "virtual_address": "0x00000000",
  703. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  704. "size": "0x00000000"
  705. },
  706. {
  707. "virtual_address": "0x00000000",
  708. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  709. "size": "0x00000000"
  710. },
  711. {
  712. "virtual_address": "0x00000000",
  713. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  714. "size": "0x00000000"
  715. },
  716. {
  717. "virtual_address": "0x00000000",
  718. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  719. "size": "0x00000000"
  720. },
  721. {
  722. "virtual_address": "0x00000000",
  723. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  724. "size": "0x00000000"
  725. },
  726. {
  727. "virtual_address": "0x00000000",
  728. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  729. "size": "0x00000000"
  730. },
  731. {
  732. "virtual_address": "0x00000000",
  733. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  734. "size": "0x00000000"
  735. },
  736. {
  737. "virtual_address": "0x00000000",
  738. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  739. "size": "0x00000000"
  740. }
  741. ],
  742. "exports": [],
  743. "guest_signers": {},
  744. "imphash": "b1e9998745df82818b92e921a2a75e35",
  745. "icon_fuzzy": null,
  746. "icon": null,
  747. "pdbpath": null,
  748. "imported_dll_count": 4,
  749. "versioninfo": []
  750. }
  751. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!