API tools faq
paste
paladin316

ddos_dll_2019-06-24_10_30.json

paladin316
Jun 24th, 2019
2,247
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 26.08 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Spyeyes"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "ddos.dll"
  7. [*] File Size: 9728
  8. [*] File Type: "PE32 executable (DLL) (console) Intel 80386, for MS Windows"
  9. [*] SHA256: "c7a7fc134d874ebb60bbc4ee8594c7fe9b472340f7ee304ce1cedf182685e2fd"
  10. [*] MD5: "716d82810241daa5e2a41327014e9a77"
  11. [*] SHA1: "b2639f5808d996a32484c0d23043870d651d0864"
  12. [*] SHA512: "058196a90d1d2e6c4f262290f4cfbab5b592caf2447f76c5830f97984ad4b397b5e1aa3778be598732b4f0e9a95a7175dff4eb4d33357096a8cbcc668b0f8db9"
  13. [*] CRC32: "B2D8C52C"
  14. [*] SSDEEP: "96:oWHaOMll5M5ZShrp0sdr0jSx5hGK2LpDHWqe7ytpEgcRQmdHQX/Kmd5+4cs7PZAD:olOonl0WpWpjxLt61qPzP+4cuLIb/w"
  15.  
  16. [*] Process Execution: [
  17. "rundll32.exe"
  18. ]
  19.  
  20. [*] Signatures Detected: [
  21. {
  22. "Description": "Creates RWX memory",
  23. "Details": []
  24. },
  25. {
  26. "Description": "File has been identified by 36 Antiviruses on VirusTotal as malicious",
  27. "Details": [
  28. {
  29. "Bkav": "W32.OnGameWLALXAJ.Trojan"
  30. },
  31. {
  32. "MicroWorld-eScan": "Trojan.Generic.KDV.205559"
  33. },
  34. {
  35. "nProtect": "Trojan/W32.Small.9728.FH"
  36. },
  37. {
  38. "CAT-QuickHeal": "TrojanSpy.SpyEyes.gdz"
  39. },
  40. {
  41. "McAfee": "PWS-Spyeye.dw"
  42. },
  43. {
  44. "Malwarebytes": "Trojan.SpyEyes"
  45. },
  46. {
  47. "TheHacker": "Trojan/Spy.SpyEyes.gdz"
  48. },
  49. {
  50. "Agnitum": "TrojanSpy.SpyEyes!Mv/wHCJz9P0"
  51. },
  52. {
  53. "Norman": "Suspicious_Gen2.MMOHQ"
  54. },
  55. {
  56. "TotalDefense": "Win32/SpyEye.VH"
  57. },
  58. {
  59. "TrendMicro-HouseCall": "TROJ_GEN.RCBCDE2"
  60. },
  61. {
  62. "ClamAV": "Win.Trojan.Spyeyes-559"
  63. },
  64. {
  65. "Kaspersky": "Trojan-Spy.Win32.SpyEyes.gdz"
  66. },
  67. {
  68. "BitDefender": "Trojan.Generic.KDV.205559"
  69. },
  70. {
  71. "NANO-Antivirus": "Trojan.Win32.SpyEyes.kxoyf"
  72. },
  73. {
  74. "Ad-Aware": "Trojan.Generic.KDV.205559"
  75. },
  76. {
  77. "Sophos": "Mal/Generic-S"
  78. },
  79. {
  80. "Comodo": "UnclassifiedMalware"
  81. },
  82. {
  83. "F-Secure": "Trojan.Generic.KDV.205559"
  84. },
  85. {
  86. "DrWeb": "BackDoor.Spy.1547"
  87. },
  88. {
  89. "VIPRE": "Trojan.Win32.Generic!BT"
  90. },
  91. {
  92. "AntiVir": "TR/Spy.SpyEyes.gdz"
  93. },
  94. {
  95. "TrendMicro": "TROJ_GEN.RCBCDE2"
  96. },
  97. {
  98. "McAfee-GW-Edition": "PWS-Spyeye.dw"
  99. },
  100. {
  101. "Jiangmin": "TrojanSpy.SpyEyes.ceb"
  102. },
  103. {
  104. "Kingsoft": "Win32.Troj.SpyEyes.(kcloud)"
  105. },
  106. {
  107. "Microsoft": "Trojan:Win32/EyeStye.plugin"
  108. },
  109. {
  110. "ViRobot": "Trojan.Win32.A.SpyEyes.9728.F"
  111. },
  112. {
  113. "AhnLab-V3": "Spyware/Win32.SpyEyes"
  114. },
  115. {
  116. "GData": "Trojan.Generic.KDV.205559"
  117. },
  118. {
  119. "VBA32": "TrojanSpy.SpyEyes"
  120. },
  121. {
  122. "Panda": "Generic Malware"
  123. },
  124. {
  125. "Ikarus": "Trojan-Spy.Win32.SpyEyes"
  126. },
  127. {
  128. "Fortinet": "W32/SpyEyes.GDZ!tr"
  129. },
  130. {
  131. "AVG": "PSW.Generic8.CCIY"
  132. },
  133. {
  134. "Baidu-International": "Trojan.Win32.SpyEyes.aULb"
  135. }
  136. ]
  137. }
  138. ]
  139.  
  140. [*] Started Service: []
  141.  
  142. [*] Executed Commands: []
  143.  
  144. [*] Mutexes: []
  145.  
  146. [*] Modified Files: []
  147.  
  148. [*] Deleted Files: []
  149.  
  150. [*] Modified Registry Keys: []
  151.  
  152. [*] Deleted Registry Keys: []
  153.  
  154. [*] DNS Communications: []
  155.  
  156. [*] Domains: []
  157.  
  158. [*] Network Communication - ICMP: []
  159.  
  160. [*] Network Communication - HTTP: []
  161.  
  162. [*] Network Communication - SMTP: []
  163.  
  164. [*] Network Communication - Hosts: []
  165.  
  166. [*] Network Communication - IRC: []
  167.  
  168. [*] Static Analysis: {
  169. "pe": {
  170. "peid_signatures": null,
  171. "imports": [
  172. {
  173. "imports": [
  174. {
  175. "name": "free",
  176. "address": "0x10003074"
  177. },
  178. {
  179. "name": "atoi",
  180. "address": "0x10003078"
  181. },
  182. {
  183. "name": "malloc",
  184. "address": "0x1000307c"
  185. },
  186. {
  187. "name": "realloc",
  188. "address": "0x10003080"
  189. },
  190. {
  191. "name": "memset",
  192. "address": "0x10003084"
  193. },
  194. {
  195. "name": "sprintf",
  196. "address": "0x10003088"
  197. },
  198. {
  199. "name": "strtok",
  200. "address": "0x1000308c"
  201. },
  202. {
  203. "name": "srand",
  204. "address": "0x10003090"
  205. },
  206. {
  207. "name": "rand",
  208. "address": "0x10003094"
  209. }
  210. ],
  211. "dll": "msvcrt.dll"
  212. },
  213. {
  214. "imports": [
  215. {
  216. "name": "ioctlsocket",
  217. "address": "0x10003048"
  218. },
  219. {
  220. "name": "send",
  221. "address": "0x1000304c"
  222. },
  223. {
  224. "name": "sendto",
  225. "address": "0x10003050"
  226. },
  227. {
  228. "name": "WSAStartup",
  229. "address": "0x10003054"
  230. },
  231. {
  232. "name": "htons",
  233. "address": "0x10003058"
  234. },
  235. {
  236. "name": "socket",
  237. "address": "0x1000305c"
  238. },
  239. {
  240. "name": "connect",
  241. "address": "0x10003060"
  242. },
  243. {
  244. "name": "closesocket",
  245. "address": "0x10003064"
  246. },
  247. {
  248. "name": "inet_addr",
  249. "address": "0x10003068"
  250. },
  251. {
  252. "name": "gethostbyname",
  253. "address": "0x1000306c"
  254. }
  255. ],
  256. "dll": "WS2_32.dll"
  257. },
  258. {
  259. "imports": [
  260. {
  261. "name": "UnhandledExceptionFilter",
  262. "address": "0x10003000"
  263. },
  264. {
  265. "name": "GetCurrentProcess",
  266. "address": "0x10003004"
  267. },
  268. {
  269. "name": "TerminateProcess",
  270. "address": "0x10003008"
  271. },
  272. {
  273. "name": "RtlUnwind",
  274. "address": "0x1000300c"
  275. },
  276. {
  277. "name": "CreateThread",
  278. "address": "0x10003010"
  279. },
  280. {
  281. "name": "lstrcmpA",
  282. "address": "0x10003014"
  283. },
  284. {
  285. "name": "lstrcpynA",
  286. "address": "0x10003018"
  287. },
  288. {
  289. "name": "WaitForSingleObject",
  290. "address": "0x1000301c"
  291. },
  292. {
  293. "name": "CloseHandle",
  294. "address": "0x10003020"
  295. },
  296. {
  297. "name": "lstrlenA",
  298. "address": "0x10003024"
  299. },
  300. {
  301. "name": "lstrcpyA",
  302. "address": "0x10003028"
  303. },
  304. {
  305. "name": "GetTickCount",
  306. "address": "0x1000302c"
  307. },
  308. {
  309. "name": "Sleep",
  310. "address": "0x10003030"
  311. },
  312. {
  313. "name": "GetProcessHeap",
  314. "address": "0x10003034"
  315. },
  316. {
  317. "name": "HeapFree",
  318. "address": "0x10003038"
  319. },
  320. {
  321. "name": "HeapAlloc",
  322. "address": "0x1000303c"
  323. },
  324. {
  325. "name": "SetUnhandledExceptionFilter",
  326. "address": "0x10003040"
  327. }
  328. ],
  329. "dll": "KERNEL32.dll"
  330. }
  331. ],
  332. "digital_signers": null,
  333. "exported_dll_name": "ddos.dll",
  334. "actual_checksum": "0x0000c9fa",
  335. "overlay": null,
  336. "imagebase": "0x10000000",
  337. "reported_checksum": "0x00000000",
  338. "icon_hash": null,
  339. "entrypoint": "0x100016e8",
  340. "timestamp": "2011-01-30 20:42:30",
  341. "osversion": "5.1",
  342. "sections": [
  343. {
  344. "name": ".text",
  345. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  346. "virtual_address": "0x00001000",
  347. "size_of_data": "0x00001200",
  348. "entropy": "5.98",
  349. "raw_address": "0x00000400",
  350. "virtual_size": "0x00001074",
  351. "characteristics_raw": "0x60000020"
  352. },
  353. {
  354. "name": ".rdata",
  355. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  356. "virtual_address": "0x00003000",
  357. "size_of_data": "0x00000600",
  358. "entropy": "4.44",
  359. "raw_address": "0x00001600",
  360. "virtual_size": "0x00000547",
  361. "characteristics_raw": "0x40000040"
  362. },
  363. {
  364. "name": ".data",
  365. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  366. "virtual_address": "0x00004000",
  367. "size_of_data": "0x00000400",
  368. "entropy": "5.75",
  369. "raw_address": "0x00001c00",
  370. "virtual_size": "0x00000858",
  371. "characteristics_raw": "0xc0000040"
  372. },
  373. {
  374. "name": ".reloc",
  375. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  376. "virtual_address": "0x00005000",
  377. "size_of_data": "0x00000600",
  378. "entropy": "1.86",
  379. "raw_address": "0x00002000",
  380. "virtual_size": "0x00000464",
  381. "characteristics_raw": "0x42000040"
  382. }
  383. ],
  384. "resources": [],
  385. "dirents": [
  386. {
  387. "virtual_address": "0x000034c0",
  388. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  389. "size": "0x00000087"
  390. },
  391. {
  392. "virtual_address": "0x00003244",
  393. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  394. "size": "0x00000050"
  395. },
  396. {
  397. "virtual_address": "0x00000000",
  398. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  399. "size": "0x00000000"
  400. },
  401. {
  402. "virtual_address": "0x00000000",
  403. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  404. "size": "0x00000000"
  405. },
  406. {
  407. "virtual_address": "0x00000000",
  408. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  409. "size": "0x00000000"
  410. },
  411. {
  412. "virtual_address": "0x00005000",
  413. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  414. "size": "0x0000013c"
  415. },
  416. {
  417. "virtual_address": "0x00000000",
  418. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  419. "size": "0x00000000"
  420. },
  421. {
  422. "virtual_address": "0x00000000",
  423. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  424. "size": "0x00000000"
  425. },
  426. {
  427. "virtual_address": "0x00000000",
  428. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  429. "size": "0x00000000"
  430. },
  431. {
  432. "virtual_address": "0x00000000",
  433. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  434. "size": "0x00000000"
  435. },
  436. {
  437. "virtual_address": "0x000031d8",
  438. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  439. "size": "0x00000040"
  440. },
  441. {
  442. "virtual_address": "0x00000000",
  443. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  444. "size": "0x00000000"
  445. },
  446. {
  447. "virtual_address": "0x00003000",
  448. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  449. "size": "0x0000009c"
  450. },
  451. {
  452. "virtual_address": "0x00000000",
  453. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  454. "size": "0x00000000"
  455. },
  456. {
  457. "virtual_address": "0x00000000",
  458. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  459. "size": "0x00000000"
  460. },
  461. {
  462. "virtual_address": "0x00000000",
  463. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  464. "size": "0x00000000"
  465. }
  466. ],
  467. "exports": [
  468. {
  469. "ordinal": 1,
  470. "name": "GetState",
  471. "address": "0x10001776"
  472. },
  473. {
  474. "ordinal": 2,
  475. "name": "SpyEye_Init",
  476. "address": "0x100016ee"
  477. },
  478. {
  479. "ordinal": 3,
  480. "name": "SpyEye_Start",
  481. "address": "0x1000191e"
  482. },
  483. {
  484. "ordinal": 4,
  485. "name": "SpyEye_Stop",
  486. "address": "0x10001736"
  487. }
  488. ],
  489. "guest_signers": {},
  490. "imphash": "6dc4401b4cfbfd191184a56946f37307",
  491. "icon_fuzzy": null,
  492. "icon": null,
  493. "pdbpath": null,
  494. "imported_dll_count": 3,
  495. "versioninfo": []
  496. }
  497. }
  498.  
  499. [*] Resolved APIs: []
  500.  
  501. [*] Static Analysis: {
  502. "pe": {
  503. "peid_signatures": null,
  504. "imports": [
  505. {
  506. "imports": [
  507. {
  508. "name": "free",
  509. "address": "0x10003074"
  510. },
  511. {
  512. "name": "atoi",
  513. "address": "0x10003078"
  514. },
  515. {
  516. "name": "malloc",
  517. "address": "0x1000307c"
  518. },
  519. {
  520. "name": "realloc",
  521. "address": "0x10003080"
  522. },
  523. {
  524. "name": "memset",
  525. "address": "0x10003084"
  526. },
  527. {
  528. "name": "sprintf",
  529. "address": "0x10003088"
  530. },
  531. {
  532. "name": "strtok",
  533. "address": "0x1000308c"
  534. },
  535. {
  536. "name": "srand",
  537. "address": "0x10003090"
  538. },
  539. {
  540. "name": "rand",
  541. "address": "0x10003094"
  542. }
  543. ],
  544. "dll": "msvcrt.dll"
  545. },
  546. {
  547. "imports": [
  548. {
  549. "name": "ioctlsocket",
  550. "address": "0x10003048"
  551. },
  552. {
  553. "name": "send",
  554. "address": "0x1000304c"
  555. },
  556. {
  557. "name": "sendto",
  558. "address": "0x10003050"
  559. },
  560. {
  561. "name": "WSAStartup",
  562. "address": "0x10003054"
  563. },
  564. {
  565. "name": "htons",
  566. "address": "0x10003058"
  567. },
  568. {
  569. "name": "socket",
  570. "address": "0x1000305c"
  571. },
  572. {
  573. "name": "connect",
  574. "address": "0x10003060"
  575. },
  576. {
  577. "name": "closesocket",
  578. "address": "0x10003064"
  579. },
  580. {
  581. "name": "inet_addr",
  582. "address": "0x10003068"
  583. },
  584. {
  585. "name": "gethostbyname",
  586. "address": "0x1000306c"
  587. }
  588. ],
  589. "dll": "WS2_32.dll"
  590. },
  591. {
  592. "imports": [
  593. {
  594. "name": "UnhandledExceptionFilter",
  595. "address": "0x10003000"
  596. },
  597. {
  598. "name": "GetCurrentProcess",
  599. "address": "0x10003004"
  600. },
  601. {
  602. "name": "TerminateProcess",
  603. "address": "0x10003008"
  604. },
  605. {
  606. "name": "RtlUnwind",
  607. "address": "0x1000300c"
  608. },
  609. {
  610. "name": "CreateThread",
  611. "address": "0x10003010"
  612. },
  613. {
  614. "name": "lstrcmpA",
  615. "address": "0x10003014"
  616. },
  617. {
  618. "name": "lstrcpynA",
  619. "address": "0x10003018"
  620. },
  621. {
  622. "name": "WaitForSingleObject",
  623. "address": "0x1000301c"
  624. },
  625. {
  626. "name": "CloseHandle",
  627. "address": "0x10003020"
  628. },
  629. {
  630. "name": "lstrlenA",
  631. "address": "0x10003024"
  632. },
  633. {
  634. "name": "lstrcpyA",
  635. "address": "0x10003028"
  636. },
  637. {
  638. "name": "GetTickCount",
  639. "address": "0x1000302c"
  640. },
  641. {
  642. "name": "Sleep",
  643. "address": "0x10003030"
  644. },
  645. {
  646. "name": "GetProcessHeap",
  647. "address": "0x10003034"
  648. },
  649. {
  650. "name": "HeapFree",
  651. "address": "0x10003038"
  652. },
  653. {
  654. "name": "HeapAlloc",
  655. "address": "0x1000303c"
  656. },
  657. {
  658. "name": "SetUnhandledExceptionFilter",
  659. "address": "0x10003040"
  660. }
  661. ],
  662. "dll": "KERNEL32.dll"
  663. }
  664. ],
  665. "digital_signers": null,
  666. "exported_dll_name": "ddos.dll",
  667. "actual_checksum": "0x0000c9fa",
  668. "overlay": null,
  669. "imagebase": "0x10000000",
  670. "reported_checksum": "0x00000000",
  671. "icon_hash": null,
  672. "entrypoint": "0x100016e8",
  673. "timestamp": "2011-01-30 20:42:30",
  674. "osversion": "5.1",
  675. "sections": [
  676. {
  677. "name": ".text",
  678. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  679. "virtual_address": "0x00001000",
  680. "size_of_data": "0x00001200",
  681. "entropy": "5.98",
  682. "raw_address": "0x00000400",
  683. "virtual_size": "0x00001074",
  684. "characteristics_raw": "0x60000020"
  685. },
  686. {
  687. "name": ".rdata",
  688. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  689. "virtual_address": "0x00003000",
  690. "size_of_data": "0x00000600",
  691. "entropy": "4.44",
  692. "raw_address": "0x00001600",
  693. "virtual_size": "0x00000547",
  694. "characteristics_raw": "0x40000040"
  695. },
  696. {
  697. "name": ".data",
  698. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  699. "virtual_address": "0x00004000",
  700. "size_of_data": "0x00000400",
  701. "entropy": "5.75",
  702. "raw_address": "0x00001c00",
  703. "virtual_size": "0x00000858",
  704. "characteristics_raw": "0xc0000040"
  705. },
  706. {
  707. "name": ".reloc",
  708. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  709. "virtual_address": "0x00005000",
  710. "size_of_data": "0x00000600",
  711. "entropy": "1.86",
  712. "raw_address": "0x00002000",
  713. "virtual_size": "0x00000464",
  714. "characteristics_raw": "0x42000040"
  715. }
  716. ],
  717. "resources": [],
  718. "dirents": [
  719. {
  720. "virtual_address": "0x000034c0",
  721. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  722. "size": "0x00000087"
  723. },
  724. {
  725. "virtual_address": "0x00003244",
  726. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  727. "size": "0x00000050"
  728. },
  729. {
  730. "virtual_address": "0x00000000",
  731. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  732. "size": "0x00000000"
  733. },
  734. {
  735. "virtual_address": "0x00000000",
  736. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  737. "size": "0x00000000"
  738. },
  739. {
  740. "virtual_address": "0x00000000",
  741. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  742. "size": "0x00000000"
  743. },
  744. {
  745. "virtual_address": "0x00005000",
  746. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  747. "size": "0x0000013c"
  748. },
  749. {
  750. "virtual_address": "0x00000000",
  751. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  752. "size": "0x00000000"
  753. },
  754. {
  755. "virtual_address": "0x00000000",
  756. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  757. "size": "0x00000000"
  758. },
  759. {
  760. "virtual_address": "0x00000000",
  761. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  762. "size": "0x00000000"
  763. },
  764. {
  765. "virtual_address": "0x00000000",
  766. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  767. "size": "0x00000000"
  768. },
  769. {
  770. "virtual_address": "0x000031d8",
  771. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  772. "size": "0x00000040"
  773. },
  774. {
  775. "virtual_address": "0x00000000",
  776. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  777. "size": "0x00000000"
  778. },
  779. {
  780. "virtual_address": "0x00003000",
  781. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  782. "size": "0x0000009c"
  783. },
  784. {
  785. "virtual_address": "0x00000000",
  786. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  787. "size": "0x00000000"
  788. },
  789. {
  790. "virtual_address": "0x00000000",
  791. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  792. "size": "0x00000000"
  793. },
  794. {
  795. "virtual_address": "0x00000000",
  796. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  797. "size": "0x00000000"
  798. }
  799. ],
  800. "exports": [
  801. {
  802. "ordinal": 1,
  803. "name": "GetState",
  804. "address": "0x10001776"
  805. },
  806. {
  807. "ordinal": 2,
  808. "name": "SpyEye_Init",
  809. "address": "0x100016ee"
  810. },
  811. {
  812. "ordinal": 3,
  813. "name": "SpyEye_Start",
  814. "address": "0x1000191e"
  815. },
  816. {
  817. "ordinal": 4,
  818. "name": "SpyEye_Stop",
  819. "address": "0x10001736"
  820. }
  821. ],
  822. "guest_signers": {},
  823. "imphash": "6dc4401b4cfbfd191184a56946f37307",
  824. "icon_fuzzy": null,
  825. "icon": null,
  826. "pdbpath": null,
  827. "imported_dll_count": 3,
  828. "versioninfo": []
  829. }
  830. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!