API tools faq
paste
paladin316

Exes_858b4aad8a5c09fe666fe9aff99a8a9e_exe_2019-06-26_17_30.json

paladin316
Jun 26th, 2019
2,180
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 54.36 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_858b4aad8a5c09fe666fe9aff99a8a9e.exe"
  7. [*] File Size: 606720
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. [*] SHA256: "ab9496dd0613dace46196329fab2267f0ac83f19d148000de16b4d21992eb674"
  10. [*] MD5: "858b4aad8a5c09fe666fe9aff99a8a9e"
  11. [*] SHA1: "a0fdc43acefd1fe4ada196bd9370b30d090153fc"
  12. [*] SHA512: "9b59d91f30eb24f70f23f028a9fa873182dfb5e8918c2d70686074beb054abaa2b22c30d839011c516c1bc67436345cf20f6b395529e925eb94871ab8573ef2e"
  13. [*] CRC32: "524599A6"
  14. [*] SSDEEP: "12288:o1MThUwpGV49lAPZrMRJAJx95FrWYe2n4x/h/Xml:wSKwpu4DAhrUuP5FrWYe2n4Zh/2"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "File has been identified by 27 Antiviruses on VirusTotal as malicious",
  21. "Details": [
  22. {
  23. "FireEye": "Generic.mg.858b4aad8a5c09fe"
  24. },
  25. {
  26. "McAfee": "RDN/Generic.grp"
  27. },
  28. {
  29. "Alibaba": "Trojan:Win32/Kryptik.5bcb50ee"
  30. },
  31. {
  32. "Symantec": "Trojan.Gen.2"
  33. },
  34. {
  35. "APEX": "Malicious"
  36. },
  37. {
  38. "Kaspersky": "UDS:DangerousObject.Multi.Generic"
  39. },
  40. {
  41. "AegisLab": "Trojan.Multi.Generic.4!c"
  42. },
  43. {
  44. "Avast": "Win32:Trojan-gen"
  45. },
  46. {
  47. "Rising": "Trojan.Kryptik!8.8 (CLOUD)"
  48. },
  49. {
  50. "Endgame": "malicious (high confidence)"
  51. },
  52. {
  53. "F-Secure": "Trojan.TR/Crypt.Agent.yhvtu"
  54. },
  55. {
  56. "Invincea": "heuristic"
  57. },
  58. {
  59. "McAfee-GW-Edition": "RDN/Generic.grp"
  60. },
  61. {
  62. "Trapmine": "malicious.moderate.ml.score"
  63. },
  64. {
  65. "Sophos": "Mal/Generic-S"
  66. },
  67. {
  68. "SentinelOne": "DFI - Malicious PE"
  69. },
  70. {
  71. "Cyren": "W32/Trojan.FUSO-4381"
  72. },
  73. {
  74. "Avira": "TR/Crypt.Agent.yhvtu"
  75. },
  76. {
  77. "Fortinet": "W32/Kryptik.GUFB!tr"
  78. },
  79. {
  80. "Microsoft": "Trojan:Win32/Wacatac.B!ml"
  81. },
  82. {
  83. "ZoneAlarm": "UDS:DangerousObject.Multi.Generic"
  84. },
  85. {
  86. "GData": "Win32.Backdoor.AMRat.MWW41W"
  87. },
  88. {
  89. "ESET-NOD32": "a variant of Win32/Kryptik.GUFB"
  90. },
  91. {
  92. "Ikarus": "Trojan.Win32.Crypt"
  93. },
  94. {
  95. "AVG": "Win32:Trojan-gen"
  96. },
  97. {
  98. "Cybereason": "malicious.acefd1"
  99. },
  100. {
  101. "CrowdStrike": "win/malicious_confidence_80% (W)"
  102. }
  103. ]
  104. }
  105. ]
  106.  
  107. [*] Started Service: []
  108.  
  109. [*] Executed Commands: []
  110.  
  111. [*] Mutexes: []
  112.  
  113. [*] Modified Files: []
  114.  
  115. [*] Deleted Files: []
  116.  
  117. [*] Modified Registry Keys: []
  118.  
  119. [*] Deleted Registry Keys: []
  120.  
  121. [*] DNS Communications: []
  122.  
  123. [*] Domains: []
  124.  
  125. [*] Network Communication - ICMP: []
  126.  
  127. [*] Network Communication - HTTP: []
  128.  
  129. [*] Network Communication - SMTP: []
  130.  
  131. [*] Network Communication - Hosts: []
  132.  
  133. [*] Network Communication - IRC: []
  134.  
  135. [*] Static Analysis: {
  136. "pe": {
  137. "peid_signatures": null,
  138. "imports": [
  139. {
  140. "imports": [
  141. {
  142. "name": "FlushFileBuffers",
  143. "address": "0x43603c"
  144. },
  145. {
  146. "name": "GetConsoleCP",
  147. "address": "0x436040"
  148. },
  149. {
  150. "name": "GetConsoleMode",
  151. "address": "0x436044"
  152. },
  153. {
  154. "name": "HeapSize",
  155. "address": "0x436048"
  156. },
  157. {
  158. "name": "HeapReAlloc",
  159. "address": "0x43604c"
  160. },
  161. {
  162. "name": "GetProcessHeap",
  163. "address": "0x436050"
  164. },
  165. {
  166. "name": "SetFilePointerEx",
  167. "address": "0x436054"
  168. },
  169. {
  170. "name": "WriteConsoleW",
  171. "address": "0x436058"
  172. },
  173. {
  174. "name": "GetStringTypeW",
  175. "address": "0x43605c"
  176. },
  177. {
  178. "name": "SetStdHandle",
  179. "address": "0x436060"
  180. },
  181. {
  182. "name": "CreateFileW",
  183. "address": "0x436064"
  184. },
  185. {
  186. "name": "AllocConsole",
  187. "address": "0x436068"
  188. },
  189. {
  190. "name": "GetGeoInfoA",
  191. "address": "0x43606c"
  192. },
  193. {
  194. "name": "K32EnumPageFilesW",
  195. "address": "0x436070"
  196. },
  197. {
  198. "name": "DefineDosDeviceW",
  199. "address": "0x436074"
  200. },
  201. {
  202. "name": "Sleep",
  203. "address": "0x436078"
  204. },
  205. {
  206. "name": "FreeEnvironmentStringsW",
  207. "address": "0x43607c"
  208. },
  209. {
  210. "name": "GetEnvironmentStringsW",
  211. "address": "0x436080"
  212. },
  213. {
  214. "name": "GetCommandLineW",
  215. "address": "0x436084"
  216. },
  217. {
  218. "name": "GetCommandLineA",
  219. "address": "0x436088"
  220. },
  221. {
  222. "name": "GetCPInfo",
  223. "address": "0x43608c"
  224. },
  225. {
  226. "name": "GetOEMCP",
  227. "address": "0x436090"
  228. },
  229. {
  230. "name": "IsValidCodePage",
  231. "address": "0x436094"
  232. },
  233. {
  234. "name": "FindNextFileA",
  235. "address": "0x436098"
  236. },
  237. {
  238. "name": "VirtualProtect",
  239. "address": "0x43609c"
  240. },
  241. {
  242. "name": "VirtualAlloc",
  243. "address": "0x4360a0"
  244. },
  245. {
  246. "name": "FindFirstFileExA",
  247. "address": "0x4360a4"
  248. },
  249. {
  250. "name": "FindClose",
  251. "address": "0x4360a8"
  252. },
  253. {
  254. "name": "CloseHandle",
  255. "address": "0x4360ac"
  256. },
  257. {
  258. "name": "GetFileType",
  259. "address": "0x4360b0"
  260. },
  261. {
  262. "name": "LCMapStringW",
  263. "address": "0x4360b4"
  264. },
  265. {
  266. "name": "HeapFree",
  267. "address": "0x4360b8"
  268. },
  269. {
  270. "name": "HeapAlloc",
  271. "address": "0x4360bc"
  272. },
  273. {
  274. "name": "GetACP",
  275. "address": "0x4360c0"
  276. },
  277. {
  278. "name": "GetModuleHandleExW",
  279. "address": "0x4360c4"
  280. },
  281. {
  282. "name": "ExitProcess",
  283. "address": "0x4360c8"
  284. },
  285. {
  286. "name": "WideCharToMultiByte",
  287. "address": "0x4360cc"
  288. },
  289. {
  290. "name": "MultiByteToWideChar",
  291. "address": "0x4360d0"
  292. },
  293. {
  294. "name": "GetModuleFileNameA",
  295. "address": "0x4360d4"
  296. },
  297. {
  298. "name": "WriteFile",
  299. "address": "0x4360d8"
  300. },
  301. {
  302. "name": "GetStdHandle",
  303. "address": "0x4360dc"
  304. },
  305. {
  306. "name": "RaiseException",
  307. "address": "0x4360e0"
  308. },
  309. {
  310. "name": "LoadLibraryExW",
  311. "address": "0x4360e4"
  312. },
  313. {
  314. "name": "GetProcAddress",
  315. "address": "0x4360e8"
  316. },
  317. {
  318. "name": "FreeLibrary",
  319. "address": "0x4360ec"
  320. },
  321. {
  322. "name": "TlsFree",
  323. "address": "0x4360f0"
  324. },
  325. {
  326. "name": "TlsSetValue",
  327. "address": "0x4360f4"
  328. },
  329. {
  330. "name": "TlsGetValue",
  331. "address": "0x4360f8"
  332. },
  333. {
  334. "name": "TlsAlloc",
  335. "address": "0x4360fc"
  336. },
  337. {
  338. "name": "InitializeCriticalSectionAndSpinCount",
  339. "address": "0x436100"
  340. },
  341. {
  342. "name": "DeleteCriticalSection",
  343. "address": "0x436104"
  344. },
  345. {
  346. "name": "DecodePointer",
  347. "address": "0x436108"
  348. },
  349. {
  350. "name": "UnhandledExceptionFilter",
  351. "address": "0x43610c"
  352. },
  353. {
  354. "name": "SetUnhandledExceptionFilter",
  355. "address": "0x436110"
  356. },
  357. {
  358. "name": "GetCurrentProcess",
  359. "address": "0x436114"
  360. },
  361. {
  362. "name": "TerminateProcess",
  363. "address": "0x436118"
  364. },
  365. {
  366. "name": "IsProcessorFeaturePresent",
  367. "address": "0x43611c"
  368. },
  369. {
  370. "name": "QueryPerformanceCounter",
  371. "address": "0x436120"
  372. },
  373. {
  374. "name": "GetCurrentProcessId",
  375. "address": "0x436124"
  376. },
  377. {
  378. "name": "GetCurrentThreadId",
  379. "address": "0x436128"
  380. },
  381. {
  382. "name": "GetSystemTimeAsFileTime",
  383. "address": "0x43612c"
  384. },
  385. {
  386. "name": "InitializeSListHead",
  387. "address": "0x436130"
  388. },
  389. {
  390. "name": "IsDebuggerPresent",
  391. "address": "0x436134"
  392. },
  393. {
  394. "name": "GetStartupInfoW",
  395. "address": "0x436138"
  396. },
  397. {
  398. "name": "GetModuleHandleW",
  399. "address": "0x43613c"
  400. },
  401. {
  402. "name": "RtlUnwind",
  403. "address": "0x436140"
  404. },
  405. {
  406. "name": "GetLastError",
  407. "address": "0x436144"
  408. },
  409. {
  410. "name": "SetLastError",
  411. "address": "0x436148"
  412. },
  413. {
  414. "name": "EnterCriticalSection",
  415. "address": "0x43614c"
  416. },
  417. {
  418. "name": "LeaveCriticalSection",
  419. "address": "0x436150"
  420. }
  421. ],
  422. "dll": "KERNEL32.dll"
  423. },
  424. {
  425. "imports": [
  426. {
  427. "name": "FindWindowW",
  428. "address": "0x4361b4"
  429. },
  430. {
  431. "name": "GetTouchInputInfo",
  432. "address": "0x4361b8"
  433. },
  434. {
  435. "name": "DdeCmpStringHandles",
  436. "address": "0x4361bc"
  437. },
  438. {
  439. "name": "MessageBoxA",
  440. "address": "0x4361c0"
  441. }
  442. ],
  443. "dll": "USER32.dll"
  444. },
  445. {
  446. "imports": [
  447. {
  448. "name": null,
  449. "address": "0x4361e4"
  450. }
  451. ],
  452. "dll": "WINSPOOL.DRV"
  453. },
  454. {
  455. "imports": [
  456. {
  457. "name": "DuplicateToken",
  458. "address": "0x436000"
  459. },
  460. {
  461. "name": "ObjectPrivilegeAuditAlarmA",
  462. "address": "0x436004"
  463. },
  464. {
  465. "name": "PerfDecrementULongCounterValue",
  466. "address": "0x436008"
  467. },
  468. {
  469. "name": "CredUnmarshalCredentialA",
  470. "address": "0x43600c"
  471. }
  472. ],
  473. "dll": "ADVAPI32.dll"
  474. },
  475. {
  476. "imports": [
  477. {
  478. "name": "VarBstrFromDate",
  479. "address": "0x436170"
  480. }
  481. ],
  482. "dll": "OLEAUT32.dll"
  483. },
  484. {
  485. "imports": [
  486. {
  487. "name": "AVIStreamRelease",
  488. "address": "0x436014"
  489. }
  490. ],
  491. "dll": "AVIFIL32.dll"
  492. },
  493. {
  494. "imports": [
  495. {
  496. "name": "DeregisterManageableLogClient",
  497. "address": "0x4361f8"
  498. }
  499. ],
  500. "dll": "clfsw32.dll"
  501. },
  502. {
  503. "imports": [
  504. {
  505. "name": "ClusterNodeGetEnumCount",
  506. "address": "0x43601c"
  507. }
  508. ],
  509. "dll": "CLUSAPI.dll"
  510. },
  511. {
  512. "imports": [
  513. {
  514. "name": "ImageList_AddMasked",
  515. "address": "0x436024"
  516. }
  517. ],
  518. "dll": "COMCTL32.dll"
  519. },
  520. {
  521. "imports": [
  522. {
  523. "name": "UnDecorateSymbolNameW",
  524. "address": "0x436200"
  525. }
  526. ],
  527. "dll": "dbghelp.dll"
  528. },
  529. {
  530. "imports": [
  531. {
  532. "name": "DnsDhcpRegisterHostAddrs",
  533. "address": "0x43602c"
  534. }
  535. ],
  536. "dll": "DNSAPI.dll"
  537. },
  538. {
  539. "imports": [
  540. {
  541. "name": null,
  542. "address": "0x436208"
  543. }
  544. ],
  545. "dll": "dsuiext.dll"
  546. },
  547. {
  548. "imports": [
  549. {
  550. "name": "GetMonitorContrast",
  551. "address": "0x436210"
  552. }
  553. ],
  554. "dll": "dxva2.dll"
  555. },
  556. {
  557. "imports": [
  558. {
  559. "name": null,
  560. "address": "0x436218"
  561. },
  562. {
  563. "name": "GdipDisposeImageAttributes",
  564. "address": "0x43621c"
  565. },
  566. {
  567. "name": "GdipGetImageFlags",
  568. "address": "0x436220"
  569. },
  570. {
  571. "name": "GdipSetPathGradientPresetBlend",
  572. "address": "0x436224"
  573. }
  574. ],
  575. "dll": "gdiplus.dll"
  576. },
  577. {
  578. "imports": [
  579. {
  580. "name": "NotifyAddrChange",
  581. "address": "0x436034"
  582. }
  583. ],
  584. "dll": "IPHLPAPI.DLL"
  585. },
  586. {
  587. "imports": [
  588. {
  589. "name": null,
  590. "address": "0x436158"
  591. }
  592. ],
  593. "dll": "MAPI32.dll"
  594. },
  595. {
  596. "imports": [
  597. {
  598. "name": "MprAdminInterfaceGetCredentials",
  599. "address": "0x436160"
  600. }
  601. ],
  602. "dll": "MPRAPI.dll"
  603. },
  604. {
  605. "imports": [
  606. {
  607. "name": "DRMGetEnvironmentInfo",
  608. "address": "0x43622c"
  609. }
  610. ],
  611. "dll": "msdrm.dll"
  612. },
  613. {
  614. "imports": [
  615. {
  616. "name": "ICInfo",
  617. "address": "0x436168"
  618. }
  619. ],
  620. "dll": "MSVFW32.dll"
  621. },
  622. {
  623. "imports": [
  624. {
  625. "name": "glColor4sv",
  626. "address": "0x436178"
  627. }
  628. ],
  629. "dll": "OPENGL32.dll"
  630. },
  631. {
  632. "imports": [
  633. {
  634. "name": "VariantToUInt32",
  635. "address": "0x436180"
  636. }
  637. ],
  638. "dll": "PROPSYS.dll"
  639. },
  640. {
  641. "imports": [
  642. {
  643. "name": "ResUtilSetResourceServiceEnvironment",
  644. "address": "0x436188"
  645. }
  646. ],
  647. "dll": "RESUTILS.dll"
  648. },
  649. {
  650. "imports": [
  651. {
  652. "name": "RpcServerListen",
  653. "address": "0x436190"
  654. },
  655. {
  656. "name": "NdrConformantStringMemorySize",
  657. "address": "0x436194"
  658. }
  659. ],
  660. "dll": "RPCRT4.dll"
  661. },
  662. {
  663. "imports": [
  664. {
  665. "name": "MgmDeleteGroupMembershipEntry",
  666. "address": "0x436234"
  667. }
  668. ],
  669. "dll": "rtm.dll"
  670. },
  671. {
  672. "imports": [
  673. {
  674. "name": "CM_Add_Range",
  675. "address": "0x43619c"
  676. }
  677. ],
  678. "dll": "SETUPAPI.dll"
  679. },
  680. {
  681. "imports": [
  682. {
  683. "name": "DllRegisterWindowClasses",
  684. "address": "0x4361a4"
  685. }
  686. ],
  687. "dll": "SHDOCVW.dll"
  688. },
  689. {
  690. "imports": [
  691. {
  692. "name": "lineGetAddressCaps",
  693. "address": "0x4361ac"
  694. }
  695. ],
  696. "dll": "TAPI32.dll"
  697. },
  698. {
  699. "imports": [
  700. {
  701. "name": "WsCreateMessageForChannel",
  702. "address": "0x43623c"
  703. }
  704. ],
  705. "dll": "webservices.dll"
  706. },
  707. {
  708. "imports": [
  709. {
  710. "name": "WinBioControlUnit",
  711. "address": "0x436244"
  712. }
  713. ],
  714. "dll": "winbio.dll"
  715. },
  716. {
  717. "imports": [
  718. {
  719. "name": "IWICMetadataQueryReader_GetLocation_Proxy",
  720. "address": "0x4361ec"
  721. },
  722. {
  723. "name": "IWICImagingFactory_CreateFastMetadataEncoderFromDecoder_Proxy",
  724. "address": "0x4361f0"
  725. }
  726. ],
  727. "dll": "WindowsCodecs.dll"
  728. },
  729. {
  730. "imports": [
  731. {
  732. "name": "WinHttpQueryOption",
  733. "address": "0x4361c8"
  734. }
  735. ],
  736. "dll": "WINHTTP.dll"
  737. },
  738. {
  739. "imports": [
  740. {
  741. "name": "FindNextUrlCacheContainerW",
  742. "address": "0x4361d0"
  743. },
  744. {
  745. "name": "InternetCheckConnectionA",
  746. "address": "0x4361d4"
  747. }
  748. ],
  749. "dll": "WININET.dll"
  750. },
  751. {
  752. "imports": [
  753. {
  754. "name": "waveOutGetErrorTextW",
  755. "address": "0x4361dc"
  756. }
  757. ],
  758. "dll": "WINMM.dll"
  759. },
  760. {
  761. "imports": [
  762. {
  763. "name": null,
  764. "address": "0x43624c"
  765. }
  766. ],
  767. "dll": "wsnmp32.dll"
  768. }
  769. ],
  770. "digital_signers": null,
  771. "exported_dll_name": null,
  772. "actual_checksum": "0x000a341f",
  773. "overlay": null,
  774. "imagebase": "0x00400000",
  775. "reported_checksum": "0x00000000",
  776. "icon_hash": null,
  777. "entrypoint": "0x0042685e",
  778. "timestamp": "2019-06-23 22:20:50",
  779. "osversion": "5.1",
  780. "sections": [
  781. {
  782. "name": ".text",
  783. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  784. "virtual_address": "0x00001000",
  785. "size_of_data": "0x00034800",
  786. "entropy": "6.32",
  787. "raw_address": "0x00000400",
  788. "virtual_size": "0x0003461b",
  789. "characteristics_raw": "0x60000020"
  790. },
  791. {
  792. "name": ".rdata",
  793. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  794. "virtual_address": "0x00036000",
  795. "size_of_data": "0x00008c00",
  796. "entropy": "5.45",
  797. "raw_address": "0x00034c00",
  798. "virtual_size": "0x00008bd6",
  799. "characteristics_raw": "0x40000040"
  800. },
  801. {
  802. "name": ".data",
  803. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  804. "virtual_address": "0x0003f000",
  805. "size_of_data": "0x0004ee00",
  806. "entropy": "6.08",
  807. "raw_address": "0x0003d800",
  808. "virtual_size": "0x0005045c",
  809. "characteristics_raw": "0xc0000040"
  810. },
  811. {
  812. "name": ".rsrc",
  813. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  814. "virtual_address": "0x00090000",
  815. "size_of_data": "0x00000200",
  816. "entropy": "4.70",
  817. "raw_address": "0x0008c600",
  818. "virtual_size": "0x000001e0",
  819. "characteristics_raw": "0x40000040"
  820. },
  821. {
  822. "name": ".reloc",
  823. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  824. "virtual_address": "0x00091000",
  825. "size_of_data": "0x00007a00",
  826. "entropy": "6.45",
  827. "raw_address": "0x0008c800",
  828. "virtual_size": "0x0000799c",
  829. "characteristics_raw": "0x42000040"
  830. }
  831. ],
  832. "resources": [],
  833. "dirents": [
  834. {
  835. "virtual_address": "0x00000000",
  836. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  837. "size": "0x00000000"
  838. },
  839. {
  840. "virtual_address": "0x0003dc34",
  841. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  842. "size": "0x000002bc"
  843. },
  844. {
  845. "virtual_address": "0x00090000",
  846. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  847. "size": "0x000001e0"
  848. },
  849. {
  850. "virtual_address": "0x00000000",
  851. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  852. "size": "0x00000000"
  853. },
  854. {
  855. "virtual_address": "0x00000000",
  856. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  857. "size": "0x00000000"
  858. },
  859. {
  860. "virtual_address": "0x00091000",
  861. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  862. "size": "0x0000799c"
  863. },
  864. {
  865. "virtual_address": "0x0003d520",
  866. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  867. "size": "0x0000001c"
  868. },
  869. {
  870. "virtual_address": "0x00000000",
  871. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  872. "size": "0x00000000"
  873. },
  874. {
  875. "virtual_address": "0x00000000",
  876. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  877. "size": "0x00000000"
  878. },
  879. {
  880. "virtual_address": "0x00000000",
  881. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  882. "size": "0x00000000"
  883. },
  884. {
  885. "virtual_address": "0x0003d540",
  886. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  887. "size": "0x00000040"
  888. },
  889. {
  890. "virtual_address": "0x00000000",
  891. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  892. "size": "0x00000000"
  893. },
  894. {
  895. "virtual_address": "0x00036000",
  896. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  897. "size": "0x00000254"
  898. },
  899. {
  900. "virtual_address": "0x00000000",
  901. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  902. "size": "0x00000000"
  903. },
  904. {
  905. "virtual_address": "0x00000000",
  906. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  907. "size": "0x00000000"
  908. },
  909. {
  910. "virtual_address": "0x00000000",
  911. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  912. "size": "0x00000000"
  913. }
  914. ],
  915. "exports": [],
  916. "guest_signers": {},
  917. "imphash": "c8503ab5366fc6e13552bba734a2de16",
  918. "icon_fuzzy": null,
  919. "icon": null,
  920. "pdbpath": null,
  921. "imported_dll_count": 34,
  922. "versioninfo": []
  923. }
  924. }
  925.  
  926. [*] Resolved APIs: []
  927.  
  928. [*] Static Analysis: {
  929. "pe": {
  930. "peid_signatures": null,
  931. "imports": [
  932. {
  933. "imports": [
  934. {
  935. "name": "FlushFileBuffers",
  936. "address": "0x43603c"
  937. },
  938. {
  939. "name": "GetConsoleCP",
  940. "address": "0x436040"
  941. },
  942. {
  943. "name": "GetConsoleMode",
  944. "address": "0x436044"
  945. },
  946. {
  947. "name": "HeapSize",
  948. "address": "0x436048"
  949. },
  950. {
  951. "name": "HeapReAlloc",
  952. "address": "0x43604c"
  953. },
  954. {
  955. "name": "GetProcessHeap",
  956. "address": "0x436050"
  957. },
  958. {
  959. "name": "SetFilePointerEx",
  960. "address": "0x436054"
  961. },
  962. {
  963. "name": "WriteConsoleW",
  964. "address": "0x436058"
  965. },
  966. {
  967. "name": "GetStringTypeW",
  968. "address": "0x43605c"
  969. },
  970. {
  971. "name": "SetStdHandle",
  972. "address": "0x436060"
  973. },
  974. {
  975. "name": "CreateFileW",
  976. "address": "0x436064"
  977. },
  978. {
  979. "name": "AllocConsole",
  980. "address": "0x436068"
  981. },
  982. {
  983. "name": "GetGeoInfoA",
  984. "address": "0x43606c"
  985. },
  986. {
  987. "name": "K32EnumPageFilesW",
  988. "address": "0x436070"
  989. },
  990. {
  991. "name": "DefineDosDeviceW",
  992. "address": "0x436074"
  993. },
  994. {
  995. "name": "Sleep",
  996. "address": "0x436078"
  997. },
  998. {
  999. "name": "FreeEnvironmentStringsW",
  1000. "address": "0x43607c"
  1001. },
  1002. {
  1003. "name": "GetEnvironmentStringsW",
  1004. "address": "0x436080"
  1005. },
  1006. {
  1007. "name": "GetCommandLineW",
  1008. "address": "0x436084"
  1009. },
  1010. {
  1011. "name": "GetCommandLineA",
  1012. "address": "0x436088"
  1013. },
  1014. {
  1015. "name": "GetCPInfo",
  1016. "address": "0x43608c"
  1017. },
  1018. {
  1019. "name": "GetOEMCP",
  1020. "address": "0x436090"
  1021. },
  1022. {
  1023. "name": "IsValidCodePage",
  1024. "address": "0x436094"
  1025. },
  1026. {
  1027. "name": "FindNextFileA",
  1028. "address": "0x436098"
  1029. },
  1030. {
  1031. "name": "VirtualProtect",
  1032. "address": "0x43609c"
  1033. },
  1034. {
  1035. "name": "VirtualAlloc",
  1036. "address": "0x4360a0"
  1037. },
  1038. {
  1039. "name": "FindFirstFileExA",
  1040. "address": "0x4360a4"
  1041. },
  1042. {
  1043. "name": "FindClose",
  1044. "address": "0x4360a8"
  1045. },
  1046. {
  1047. "name": "CloseHandle",
  1048. "address": "0x4360ac"
  1049. },
  1050. {
  1051. "name": "GetFileType",
  1052. "address": "0x4360b0"
  1053. },
  1054. {
  1055. "name": "LCMapStringW",
  1056. "address": "0x4360b4"
  1057. },
  1058. {
  1059. "name": "HeapFree",
  1060. "address": "0x4360b8"
  1061. },
  1062. {
  1063. "name": "HeapAlloc",
  1064. "address": "0x4360bc"
  1065. },
  1066. {
  1067. "name": "GetACP",
  1068. "address": "0x4360c0"
  1069. },
  1070. {
  1071. "name": "GetModuleHandleExW",
  1072. "address": "0x4360c4"
  1073. },
  1074. {
  1075. "name": "ExitProcess",
  1076. "address": "0x4360c8"
  1077. },
  1078. {
  1079. "name": "WideCharToMultiByte",
  1080. "address": "0x4360cc"
  1081. },
  1082. {
  1083. "name": "MultiByteToWideChar",
  1084. "address": "0x4360d0"
  1085. },
  1086. {
  1087. "name": "GetModuleFileNameA",
  1088. "address": "0x4360d4"
  1089. },
  1090. {
  1091. "name": "WriteFile",
  1092. "address": "0x4360d8"
  1093. },
  1094. {
  1095. "name": "GetStdHandle",
  1096. "address": "0x4360dc"
  1097. },
  1098. {
  1099. "name": "RaiseException",
  1100. "address": "0x4360e0"
  1101. },
  1102. {
  1103. "name": "LoadLibraryExW",
  1104. "address": "0x4360e4"
  1105. },
  1106. {
  1107. "name": "GetProcAddress",
  1108. "address": "0x4360e8"
  1109. },
  1110. {
  1111. "name": "FreeLibrary",
  1112. "address": "0x4360ec"
  1113. },
  1114. {
  1115. "name": "TlsFree",
  1116. "address": "0x4360f0"
  1117. },
  1118. {
  1119. "name": "TlsSetValue",
  1120. "address": "0x4360f4"
  1121. },
  1122. {
  1123. "name": "TlsGetValue",
  1124. "address": "0x4360f8"
  1125. },
  1126. {
  1127. "name": "TlsAlloc",
  1128. "address": "0x4360fc"
  1129. },
  1130. {
  1131. "name": "InitializeCriticalSectionAndSpinCount",
  1132. "address": "0x436100"
  1133. },
  1134. {
  1135. "name": "DeleteCriticalSection",
  1136. "address": "0x436104"
  1137. },
  1138. {
  1139. "name": "DecodePointer",
  1140. "address": "0x436108"
  1141. },
  1142. {
  1143. "name": "UnhandledExceptionFilter",
  1144. "address": "0x43610c"
  1145. },
  1146. {
  1147. "name": "SetUnhandledExceptionFilter",
  1148. "address": "0x436110"
  1149. },
  1150. {
  1151. "name": "GetCurrentProcess",
  1152. "address": "0x436114"
  1153. },
  1154. {
  1155. "name": "TerminateProcess",
  1156. "address": "0x436118"
  1157. },
  1158. {
  1159. "name": "IsProcessorFeaturePresent",
  1160. "address": "0x43611c"
  1161. },
  1162. {
  1163. "name": "QueryPerformanceCounter",
  1164. "address": "0x436120"
  1165. },
  1166. {
  1167. "name": "GetCurrentProcessId",
  1168. "address": "0x436124"
  1169. },
  1170. {
  1171. "name": "GetCurrentThreadId",
  1172. "address": "0x436128"
  1173. },
  1174. {
  1175. "name": "GetSystemTimeAsFileTime",
  1176. "address": "0x43612c"
  1177. },
  1178. {
  1179. "name": "InitializeSListHead",
  1180. "address": "0x436130"
  1181. },
  1182. {
  1183. "name": "IsDebuggerPresent",
  1184. "address": "0x436134"
  1185. },
  1186. {
  1187. "name": "GetStartupInfoW",
  1188. "address": "0x436138"
  1189. },
  1190. {
  1191. "name": "GetModuleHandleW",
  1192. "address": "0x43613c"
  1193. },
  1194. {
  1195. "name": "RtlUnwind",
  1196. "address": "0x436140"
  1197. },
  1198. {
  1199. "name": "GetLastError",
  1200. "address": "0x436144"
  1201. },
  1202. {
  1203. "name": "SetLastError",
  1204. "address": "0x436148"
  1205. },
  1206. {
  1207. "name": "EnterCriticalSection",
  1208. "address": "0x43614c"
  1209. },
  1210. {
  1211. "name": "LeaveCriticalSection",
  1212. "address": "0x436150"
  1213. }
  1214. ],
  1215. "dll": "KERNEL32.dll"
  1216. },
  1217. {
  1218. "imports": [
  1219. {
  1220. "name": "FindWindowW",
  1221. "address": "0x4361b4"
  1222. },
  1223. {
  1224. "name": "GetTouchInputInfo",
  1225. "address": "0x4361b8"
  1226. },
  1227. {
  1228. "name": "DdeCmpStringHandles",
  1229. "address": "0x4361bc"
  1230. },
  1231. {
  1232. "name": "MessageBoxA",
  1233. "address": "0x4361c0"
  1234. }
  1235. ],
  1236. "dll": "USER32.dll"
  1237. },
  1238. {
  1239. "imports": [
  1240. {
  1241. "name": null,
  1242. "address": "0x4361e4"
  1243. }
  1244. ],
  1245. "dll": "WINSPOOL.DRV"
  1246. },
  1247. {
  1248. "imports": [
  1249. {
  1250. "name": "DuplicateToken",
  1251. "address": "0x436000"
  1252. },
  1253. {
  1254. "name": "ObjectPrivilegeAuditAlarmA",
  1255. "address": "0x436004"
  1256. },
  1257. {
  1258. "name": "PerfDecrementULongCounterValue",
  1259. "address": "0x436008"
  1260. },
  1261. {
  1262. "name": "CredUnmarshalCredentialA",
  1263. "address": "0x43600c"
  1264. }
  1265. ],
  1266. "dll": "ADVAPI32.dll"
  1267. },
  1268. {
  1269. "imports": [
  1270. {
  1271. "name": "VarBstrFromDate",
  1272. "address": "0x436170"
  1273. }
  1274. ],
  1275. "dll": "OLEAUT32.dll"
  1276. },
  1277. {
  1278. "imports": [
  1279. {
  1280. "name": "AVIStreamRelease",
  1281. "address": "0x436014"
  1282. }
  1283. ],
  1284. "dll": "AVIFIL32.dll"
  1285. },
  1286. {
  1287. "imports": [
  1288. {
  1289. "name": "DeregisterManageableLogClient",
  1290. "address": "0x4361f8"
  1291. }
  1292. ],
  1293. "dll": "clfsw32.dll"
  1294. },
  1295. {
  1296. "imports": [
  1297. {
  1298. "name": "ClusterNodeGetEnumCount",
  1299. "address": "0x43601c"
  1300. }
  1301. ],
  1302. "dll": "CLUSAPI.dll"
  1303. },
  1304. {
  1305. "imports": [
  1306. {
  1307. "name": "ImageList_AddMasked",
  1308. "address": "0x436024"
  1309. }
  1310. ],
  1311. "dll": "COMCTL32.dll"
  1312. },
  1313. {
  1314. "imports": [
  1315. {
  1316. "name": "UnDecorateSymbolNameW",
  1317. "address": "0x436200"
  1318. }
  1319. ],
  1320. "dll": "dbghelp.dll"
  1321. },
  1322. {
  1323. "imports": [
  1324. {
  1325. "name": "DnsDhcpRegisterHostAddrs",
  1326. "address": "0x43602c"
  1327. }
  1328. ],
  1329. "dll": "DNSAPI.dll"
  1330. },
  1331. {
  1332. "imports": [
  1333. {
  1334. "name": null,
  1335. "address": "0x436208"
  1336. }
  1337. ],
  1338. "dll": "dsuiext.dll"
  1339. },
  1340. {
  1341. "imports": [
  1342. {
  1343. "name": "GetMonitorContrast",
  1344. "address": "0x436210"
  1345. }
  1346. ],
  1347. "dll": "dxva2.dll"
  1348. },
  1349. {
  1350. "imports": [
  1351. {
  1352. "name": null,
  1353. "address": "0x436218"
  1354. },
  1355. {
  1356. "name": "GdipDisposeImageAttributes",
  1357. "address": "0x43621c"
  1358. },
  1359. {
  1360. "name": "GdipGetImageFlags",
  1361. "address": "0x436220"
  1362. },
  1363. {
  1364. "name": "GdipSetPathGradientPresetBlend",
  1365. "address": "0x436224"
  1366. }
  1367. ],
  1368. "dll": "gdiplus.dll"
  1369. },
  1370. {
  1371. "imports": [
  1372. {
  1373. "name": "NotifyAddrChange",
  1374. "address": "0x436034"
  1375. }
  1376. ],
  1377. "dll": "IPHLPAPI.DLL"
  1378. },
  1379. {
  1380. "imports": [
  1381. {
  1382. "name": null,
  1383. "address": "0x436158"
  1384. }
  1385. ],
  1386. "dll": "MAPI32.dll"
  1387. },
  1388. {
  1389. "imports": [
  1390. {
  1391. "name": "MprAdminInterfaceGetCredentials",
  1392. "address": "0x436160"
  1393. }
  1394. ],
  1395. "dll": "MPRAPI.dll"
  1396. },
  1397. {
  1398. "imports": [
  1399. {
  1400. "name": "DRMGetEnvironmentInfo",
  1401. "address": "0x43622c"
  1402. }
  1403. ],
  1404. "dll": "msdrm.dll"
  1405. },
  1406. {
  1407. "imports": [
  1408. {
  1409. "name": "ICInfo",
  1410. "address": "0x436168"
  1411. }
  1412. ],
  1413. "dll": "MSVFW32.dll"
  1414. },
  1415. {
  1416. "imports": [
  1417. {
  1418. "name": "glColor4sv",
  1419. "address": "0x436178"
  1420. }
  1421. ],
  1422. "dll": "OPENGL32.dll"
  1423. },
  1424. {
  1425. "imports": [
  1426. {
  1427. "name": "VariantToUInt32",
  1428. "address": "0x436180"
  1429. }
  1430. ],
  1431. "dll": "PROPSYS.dll"
  1432. },
  1433. {
  1434. "imports": [
  1435. {
  1436. "name": "ResUtilSetResourceServiceEnvironment",
  1437. "address": "0x436188"
  1438. }
  1439. ],
  1440. "dll": "RESUTILS.dll"
  1441. },
  1442. {
  1443. "imports": [
  1444. {
  1445. "name": "RpcServerListen",
  1446. "address": "0x436190"
  1447. },
  1448. {
  1449. "name": "NdrConformantStringMemorySize",
  1450. "address": "0x436194"
  1451. }
  1452. ],
  1453. "dll": "RPCRT4.dll"
  1454. },
  1455. {
  1456. "imports": [
  1457. {
  1458. "name": "MgmDeleteGroupMembershipEntry",
  1459. "address": "0x436234"
  1460. }
  1461. ],
  1462. "dll": "rtm.dll"
  1463. },
  1464. {
  1465. "imports": [
  1466. {
  1467. "name": "CM_Add_Range",
  1468. "address": "0x43619c"
  1469. }
  1470. ],
  1471. "dll": "SETUPAPI.dll"
  1472. },
  1473. {
  1474. "imports": [
  1475. {
  1476. "name": "DllRegisterWindowClasses",
  1477. "address": "0x4361a4"
  1478. }
  1479. ],
  1480. "dll": "SHDOCVW.dll"
  1481. },
  1482. {
  1483. "imports": [
  1484. {
  1485. "name": "lineGetAddressCaps",
  1486. "address": "0x4361ac"
  1487. }
  1488. ],
  1489. "dll": "TAPI32.dll"
  1490. },
  1491. {
  1492. "imports": [
  1493. {
  1494. "name": "WsCreateMessageForChannel",
  1495. "address": "0x43623c"
  1496. }
  1497. ],
  1498. "dll": "webservices.dll"
  1499. },
  1500. {
  1501. "imports": [
  1502. {
  1503. "name": "WinBioControlUnit",
  1504. "address": "0x436244"
  1505. }
  1506. ],
  1507. "dll": "winbio.dll"
  1508. },
  1509. {
  1510. "imports": [
  1511. {
  1512. "name": "IWICMetadataQueryReader_GetLocation_Proxy",
  1513. "address": "0x4361ec"
  1514. },
  1515. {
  1516. "name": "IWICImagingFactory_CreateFastMetadataEncoderFromDecoder_Proxy",
  1517. "address": "0x4361f0"
  1518. }
  1519. ],
  1520. "dll": "WindowsCodecs.dll"
  1521. },
  1522. {
  1523. "imports": [
  1524. {
  1525. "name": "WinHttpQueryOption",
  1526. "address": "0x4361c8"
  1527. }
  1528. ],
  1529. "dll": "WINHTTP.dll"
  1530. },
  1531. {
  1532. "imports": [
  1533. {
  1534. "name": "FindNextUrlCacheContainerW",
  1535. "address": "0x4361d0"
  1536. },
  1537. {
  1538. "name": "InternetCheckConnectionA",
  1539. "address": "0x4361d4"
  1540. }
  1541. ],
  1542. "dll": "WININET.dll"
  1543. },
  1544. {
  1545. "imports": [
  1546. {
  1547. "name": "waveOutGetErrorTextW",
  1548. "address": "0x4361dc"
  1549. }
  1550. ],
  1551. "dll": "WINMM.dll"
  1552. },
  1553. {
  1554. "imports": [
  1555. {
  1556. "name": null,
  1557. "address": "0x43624c"
  1558. }
  1559. ],
  1560. "dll": "wsnmp32.dll"
  1561. }
  1562. ],
  1563. "digital_signers": null,
  1564. "exported_dll_name": null,
  1565. "actual_checksum": "0x000a341f",
  1566. "overlay": null,
  1567. "imagebase": "0x00400000",
  1568. "reported_checksum": "0x00000000",
  1569. "icon_hash": null,
  1570. "entrypoint": "0x0042685e",
  1571. "timestamp": "2019-06-23 22:20:50",
  1572. "osversion": "5.1",
  1573. "sections": [
  1574. {
  1575. "name": ".text",
  1576. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  1577. "virtual_address": "0x00001000",
  1578. "size_of_data": "0x00034800",
  1579. "entropy": "6.32",
  1580. "raw_address": "0x00000400",
  1581. "virtual_size": "0x0003461b",
  1582. "characteristics_raw": "0x60000020"
  1583. },
  1584. {
  1585. "name": ".rdata",
  1586. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1587. "virtual_address": "0x00036000",
  1588. "size_of_data": "0x00008c00",
  1589. "entropy": "5.45",
  1590. "raw_address": "0x00034c00",
  1591. "virtual_size": "0x00008bd6",
  1592. "characteristics_raw": "0x40000040"
  1593. },
  1594. {
  1595. "name": ".data",
  1596. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  1597. "virtual_address": "0x0003f000",
  1598. "size_of_data": "0x0004ee00",
  1599. "entropy": "6.08",
  1600. "raw_address": "0x0003d800",
  1601. "virtual_size": "0x0005045c",
  1602. "characteristics_raw": "0xc0000040"
  1603. },
  1604. {
  1605. "name": ".rsrc",
  1606. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  1607. "virtual_address": "0x00090000",
  1608. "size_of_data": "0x00000200",
  1609. "entropy": "4.70",
  1610. "raw_address": "0x0008c600",
  1611. "virtual_size": "0x000001e0",
  1612. "characteristics_raw": "0x40000040"
  1613. },
  1614. {
  1615. "name": ".reloc",
  1616. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  1617. "virtual_address": "0x00091000",
  1618. "size_of_data": "0x00007a00",
  1619. "entropy": "6.45",
  1620. "raw_address": "0x0008c800",
  1621. "virtual_size": "0x0000799c",
  1622. "characteristics_raw": "0x42000040"
  1623. }
  1624. ],
  1625. "resources": [],
  1626. "dirents": [
  1627. {
  1628. "virtual_address": "0x00000000",
  1629. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  1630. "size": "0x00000000"
  1631. },
  1632. {
  1633. "virtual_address": "0x0003dc34",
  1634. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  1635. "size": "0x000002bc"
  1636. },
  1637. {
  1638. "virtual_address": "0x00090000",
  1639. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  1640. "size": "0x000001e0"
  1641. },
  1642. {
  1643. "virtual_address": "0x00000000",
  1644. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  1645. "size": "0x00000000"
  1646. },
  1647. {
  1648. "virtual_address": "0x00000000",
  1649. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  1650. "size": "0x00000000"
  1651. },
  1652. {
  1653. "virtual_address": "0x00091000",
  1654. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  1655. "size": "0x0000799c"
  1656. },
  1657. {
  1658. "virtual_address": "0x0003d520",
  1659. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  1660. "size": "0x0000001c"
  1661. },
  1662. {
  1663. "virtual_address": "0x00000000",
  1664. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  1665. "size": "0x00000000"
  1666. },
  1667. {
  1668. "virtual_address": "0x00000000",
  1669. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  1670. "size": "0x00000000"
  1671. },
  1672. {
  1673. "virtual_address": "0x00000000",
  1674. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  1675. "size": "0x00000000"
  1676. },
  1677. {
  1678. "virtual_address": "0x0003d540",
  1679. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  1680. "size": "0x00000040"
  1681. },
  1682. {
  1683. "virtual_address": "0x00000000",
  1684. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  1685. "size": "0x00000000"
  1686. },
  1687. {
  1688. "virtual_address": "0x00036000",
  1689. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  1690. "size": "0x00000254"
  1691. },
  1692. {
  1693. "virtual_address": "0x00000000",
  1694. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  1695. "size": "0x00000000"
  1696. },
  1697. {
  1698. "virtual_address": "0x00000000",
  1699. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  1700. "size": "0x00000000"
  1701. },
  1702. {
  1703. "virtual_address": "0x00000000",
  1704. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  1705. "size": "0x00000000"
  1706. }
  1707. ],
  1708. "exports": [],
  1709. "guest_signers": {},
  1710. "imphash": "c8503ab5366fc6e13552bba734a2de16",
  1711. "icon_fuzzy": null,
  1712. "icon": null,
  1713. "pdbpath": null,
  1714. "imported_dll_count": 34,
  1715. "versioninfo": []
  1716. }
  1717. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!