API tools faq
paste
paladin316

Exes_ccf5b663061e7e2755f8eed37e49b732_exe_2019-07-02_13_30.json

paladin316
Jul 2nd, 2019
2,120
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.07 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_ccf5b663061e7e2755f8eed37e49b732.exe"
  7. [*] File Size: 5427200
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed"
  9. [*] SHA256: "f9a972757cd0d8a837eb30f6a28bc9b5e2a6674825b18359648c50bbb7d6d74a"
  10. [*] MD5: "ccf5b663061e7e2755f8eed37e49b732"
  11. [*] SHA1: "6176da306c6557a27641d34047d82f40cddf5cf7"
  12. [*] SHA512: "0a14cdad86888ca7fe977ff88a3e9315da5866f8330af8282aa9bdd49ad75bde4ed08b87b089cce48a6862f33be4f819289216af315176e5f25cd6c4cc229198"
  13. [*] CRC32: "15289F93"
  14. [*] SSDEEP: "98304:1dLG+QUvfklNE8lHIMVpboQuiA0qhKLgfGKPsvXFshyNvjxE77K5kMn/Gead8h5n:fG+QVe9jhKLgfGKcNFi+7nH4P0QzRAen"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: UPX1, entropy: 7.82, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x0052c800, virtual_size: 0x0052d000"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "The executable is compressed using UPX",
  29. "Details": [
  30. {
  31. "section": "name: UPX0, entropy: 0.00, characteristics: IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00000000, virtual_size: 0x00170000"
  32. }
  33. ]
  34. },
  35. {
  36. "Description": "File has been identified by 47 Antiviruses on VirusTotal as malicious",
  37. "Details": [
  38. {
  39. "MicroWorld-eScan": "Generic.Backdoor.Torr.94C32930"
  40. },
  41. {
  42. "CAT-QuickHeal": "Trojanpws.Qqpass.16543"
  43. },
  44. {
  45. "ALYac": "Generic.Backdoor.Torr.94C32930"
  46. },
  47. {
  48. "Malwarebytes": "Trojan.BitCoinMiner"
  49. },
  50. {
  51. "AegisLab": "Trojan.Multi.Generic.lpKS"
  52. },
  53. {
  54. "Alibaba": "VirTool:Win32/CeeInject.84035381"
  55. },
  56. {
  57. "Arcabit": "Generic.Backdoor.Torr.94C32930"
  58. },
  59. {
  60. "F-Prot": "W32/Trojan.CLL.gen!Eldorado"
  61. },
  62. {
  63. "Symantec": "Hacktool.Mimikatz"
  64. },
  65. {
  66. "APEX": "Malicious"
  67. },
  68. {
  69. "ClamAV": "Win.Exploit.EQGRP-6322722-0"
  70. },
  71. {
  72. "Kaspersky": "HEUR:Exploit.Win32.MS17-010.gen"
  73. },
  74. {
  75. "BitDefender": "Generic.Backdoor.Torr.94C32930"
  76. },
  77. {
  78. "Avast": "Win32:Malware-gen"
  79. },
  80. {
  81. "Ad-Aware": "Generic.Backdoor.Torr.94C32930"
  82. },
  83. {
  84. "Emsisoft": "Generic.Backdoor.Torr.94C32930 (B)"
  85. },
  86. {
  87. "Comodo": "Packed.Win32.MUPX.Gen@24tbus"
  88. },
  89. {
  90. "DrWeb": "Trojan.Equation.77"
  91. },
  92. {
  93. "TrendMicro": "TROJ_GEN.R002C0DG219"
  94. },
  95. {
  96. "McAfee-GW-Edition": "BehavesLike.Win32.Trojan.tc"
  97. },
  98. {
  99. "Trapmine": "malicious.high.ml.score"
  100. },
  101. {
  102. "FireEye": "Generic.mg.ccf5b663061e7e27"
  103. },
  104. {
  105. "Sophos": "Mal/Behav-004"
  106. },
  107. {
  108. "SentinelOne": "DFI - Malicious PE"
  109. },
  110. {
  111. "Cyren": "W32/Trojan.CLL.gen!Eldorado"
  112. },
  113. {
  114. "Avira": "HEUR/AGEN.1014767"
  115. },
  116. {
  117. "Antiy-AVL": "GrayWare/Win32.FlyStudio.a"
  118. },
  119. {
  120. "Microsoft": "VirTool:Win32/CeeInject.SN!bit"
  121. },
  122. {
  123. "Endgame": "malicious (moderate confidence)"
  124. },
  125. {
  126. "ZoneAlarm": "HEUR:Exploit.Win32.MS17-010.gen"
  127. },
  128. {
  129. "GData": "Win32.Trojan.FlyStudio.F"
  130. },
  131. {
  132. "AhnLab-V3": "Malware/Win32.Generic.C3246619"
  133. },
  134. {
  135. "Acronis": "suspicious"
  136. },
  137. {
  138. "McAfee": "Artemis!CCF5B663061E"
  139. },
  140. {
  141. "MAX": "malware (ai score=94)"
  142. },
  143. {
  144. "VBA32": "BScope.Adware.Wajam"
  145. },
  146. {
  147. "Cylance": "Unsafe"
  148. },
  149. {
  150. "ESET-NOD32": "a variant of Win32/CoinMiner.BUJ"
  151. },
  152. {
  153. "TrendMicro-HouseCall": "TROJ_GEN.R002C0DG219"
  154. },
  155. {
  156. "Rising": "Exploit.MS17-010!8.E85D (CLOUD)"
  157. },
  158. {
  159. "Ikarus": "Trojan-PSW.QQpass"
  160. },
  161. {
  162. "eGambit": "hacktool.mimikatz"
  163. },
  164. {
  165. "Fortinet": "W32/CoinMiner.BUJ!tr"
  166. },
  167. {
  168. "AVG": "Win32:Malware-gen"
  169. },
  170. {
  171. "Cybereason": "malicious.3061e7"
  172. },
  173. {
  174. "CrowdStrike": "win/malicious_confidence_90% (W)"
  175. },
  176. {
  177. "Qihoo-360": "Win32/Trojan.Exploit.46b"
  178. }
  179. ]
  180. }
  181. ]
  182.  
  183. [*] Started Service: []
  184.  
  185. [*] Executed Commands: []
  186.  
  187. [*] Mutexes: []
  188.  
  189. [*] Modified Files: []
  190.  
  191. [*] Deleted Files: []
  192.  
  193. [*] Modified Registry Keys: []
  194.  
  195. [*] Deleted Registry Keys: []
  196.  
  197. [*] DNS Communications: []
  198.  
  199. [*] Domains: []
  200.  
  201. [*] Network Communication - ICMP: []
  202.  
  203. [*] Network Communication - HTTP: []
  204.  
  205. [*] Network Communication - SMTP: []
  206.  
  207. [*] Network Communication - Hosts: []
  208.  
  209. [*] Network Communication - IRC: []
  210.  
  211. [*] Static Analysis: {
  212. "pe": {
  213. "peid_signatures": null,
  214. "imports": [
  215. {
  216. "imports": [
  217. {
  218. "name": "RegCloseKey",
  219. "address": "0xa9e154"
  220. }
  221. ],
  222. "dll": "ADVAPI32.dll"
  223. },
  224. {
  225. "imports": [
  226. {
  227. "name": null,
  228. "address": "0xa9e15c"
  229. }
  230. ],
  231. "dll": "COMCTL32.dll"
  232. },
  233. {
  234. "imports": [
  235. {
  236. "name": "ChooseColorA",
  237. "address": "0xa9e164"
  238. }
  239. ],
  240. "dll": "comdlg32.dll"
  241. },
  242. {
  243. "imports": [
  244. {
  245. "name": "Escape",
  246. "address": "0xa9e16c"
  247. }
  248. ],
  249. "dll": "GDI32.dll"
  250. },
  251. {
  252. "imports": [
  253. {
  254. "name": "GetAdaptersInfo",
  255. "address": "0xa9e174"
  256. }
  257. ],
  258. "dll": "iphlpapi.dll"
  259. },
  260. {
  261. "imports": [
  262. {
  263. "name": "LoadLibraryA",
  264. "address": "0xa9e17c"
  265. },
  266. {
  267. "name": "ExitProcess",
  268. "address": "0xa9e180"
  269. },
  270. {
  271. "name": "GetProcAddress",
  272. "address": "0xa9e184"
  273. },
  274. {
  275. "name": "VirtualProtect",
  276. "address": "0xa9e188"
  277. }
  278. ],
  279. "dll": "KERNEL32.DLL"
  280. },
  281. {
  282. "imports": [
  283. {
  284. "name": "OleRun",
  285. "address": "0xa9e190"
  286. }
  287. ],
  288. "dll": "ole32.dll"
  289. },
  290. {
  291. "imports": [
  292. {
  293. "name": "VariantCopy",
  294. "address": "0xa9e198"
  295. }
  296. ],
  297. "dll": "OLEAUT32.dll"
  298. },
  299. {
  300. "imports": [
  301. {
  302. "name": "RasHangUpA",
  303. "address": "0xa9e1a0"
  304. }
  305. ],
  306. "dll": "RASAPI32.dll"
  307. },
  308. {
  309. "imports": [
  310. {
  311. "name": "ShellExecuteA",
  312. "address": "0xa9e1a8"
  313. }
  314. ],
  315. "dll": "SHELL32.dll"
  316. },
  317. {
  318. "imports": [
  319. {
  320. "name": "GetDC",
  321. "address": "0xa9e1b0"
  322. }
  323. ],
  324. "dll": "USER32.dll"
  325. },
  326. {
  327. "imports": [
  328. {
  329. "name": "VerQueryValueA",
  330. "address": "0xa9e1b8"
  331. }
  332. ],
  333. "dll": "VERSION.dll"
  334. },
  335. {
  336. "imports": [
  337. {
  338. "name": "InternetOpenA",
  339. "address": "0xa9e1c0"
  340. }
  341. ],
  342. "dll": "WININET.dll"
  343. },
  344. {
  345. "imports": [
  346. {
  347. "name": "waveOutOpen",
  348. "address": "0xa9e1c8"
  349. }
  350. ],
  351. "dll": "WINMM.dll"
  352. },
  353. {
  354. "imports": [
  355. {
  356. "name": "OpenPrinterA",
  357. "address": "0xa9e1d0"
  358. }
  359. ],
  360. "dll": "WINSPOOL.DRV"
  361. },
  362. {
  363. "imports": [
  364. {
  365. "name": "recvfrom",
  366. "address": "0xa9e1d8"
  367. }
  368. ],
  369. "dll": "WS2_32.dll"
  370. }
  371. ],
  372. "digital_signers": null,
  373. "exported_dll_name": null,
  374. "actual_checksum": "0x00532b7a",
  375. "overlay": null,
  376. "imagebase": "0x00400000",
  377. "reported_checksum": "0x00000000",
  378. "icon_hash": null,
  379. "entrypoint": "0x00a9d5e0",
  380. "timestamp": "2019-07-01 18:18:51",
  381. "osversion": "4.0",
  382. "sections": [
  383. {
  384. "name": "UPX0",
  385. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  386. "virtual_address": "0x00001000",
  387. "size_of_data": "0x00000000",
  388. "entropy": "0.00",
  389. "raw_address": "0x00000400",
  390. "virtual_size": "0x00170000",
  391. "characteristics_raw": "0xe0000080"
  392. },
  393. {
  394. "name": "UPX1",
  395. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  396. "virtual_address": "0x00171000",
  397. "size_of_data": "0x0052c800",
  398. "entropy": "7.82",
  399. "raw_address": "0x00000400",
  400. "virtual_size": "0x0052d000",
  401. "characteristics_raw": "0xe0000040"
  402. },
  403. {
  404. "name": "UPX2",
  405. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  406. "virtual_address": "0x0069e000",
  407. "size_of_data": "0x00000400",
  408. "entropy": "3.70",
  409. "raw_address": "0x0052cc00",
  410. "virtual_size": "0x00001000",
  411. "characteristics_raw": "0xc0000040"
  412. }
  413. ],
  414. "resources": [],
  415. "dirents": [
  416. {
  417. "virtual_address": "0x00000000",
  418. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  419. "size": "0x00000000"
  420. },
  421. {
  422. "virtual_address": "0x0069e000",
  423. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  424. "size": "0x0000037c"
  425. },
  426. {
  427. "virtual_address": "0x00000000",
  428. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  429. "size": "0x00000000"
  430. },
  431. {
  432. "virtual_address": "0x00000000",
  433. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  434. "size": "0x00000000"
  435. },
  436. {
  437. "virtual_address": "0x00000000",
  438. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  439. "size": "0x00000000"
  440. },
  441. {
  442. "virtual_address": "0x00000000",
  443. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  444. "size": "0x00000000"
  445. },
  446. {
  447. "virtual_address": "0x00000000",
  448. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  449. "size": "0x00000000"
  450. },
  451. {
  452. "virtual_address": "0x00000000",
  453. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  454. "size": "0x00000000"
  455. },
  456. {
  457. "virtual_address": "0x00000000",
  458. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  459. "size": "0x00000000"
  460. },
  461. {
  462. "virtual_address": "0x00000000",
  463. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  464. "size": "0x00000000"
  465. },
  466. {
  467. "virtual_address": "0x00000000",
  468. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  469. "size": "0x00000000"
  470. },
  471. {
  472. "virtual_address": "0x00000000",
  473. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  474. "size": "0x00000000"
  475. },
  476. {
  477. "virtual_address": "0x00000000",
  478. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  479. "size": "0x00000000"
  480. },
  481. {
  482. "virtual_address": "0x00000000",
  483. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  484. "size": "0x00000000"
  485. },
  486. {
  487. "virtual_address": "0x00000000",
  488. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  489. "size": "0x00000000"
  490. },
  491. {
  492. "virtual_address": "0x00000000",
  493. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  494. "size": "0x00000000"
  495. }
  496. ],
  497. "exports": [],
  498. "guest_signers": {},
  499. "imphash": "7e8fd41cc4af90fd0b2731fbcc919e1a",
  500. "icon_fuzzy": null,
  501. "icon": null,
  502. "pdbpath": null,
  503. "imported_dll_count": 16,
  504. "versioninfo": []
  505. }
  506. }
  507.  
  508. [*] Resolved APIs: []
  509.  
  510. [*] Static Analysis: {
  511. "pe": {
  512. "peid_signatures": null,
  513. "imports": [
  514. {
  515. "imports": [
  516. {
  517. "name": "RegCloseKey",
  518. "address": "0xa9e154"
  519. }
  520. ],
  521. "dll": "ADVAPI32.dll"
  522. },
  523. {
  524. "imports": [
  525. {
  526. "name": null,
  527. "address": "0xa9e15c"
  528. }
  529. ],
  530. "dll": "COMCTL32.dll"
  531. },
  532. {
  533. "imports": [
  534. {
  535. "name": "ChooseColorA",
  536. "address": "0xa9e164"
  537. }
  538. ],
  539. "dll": "comdlg32.dll"
  540. },
  541. {
  542. "imports": [
  543. {
  544. "name": "Escape",
  545. "address": "0xa9e16c"
  546. }
  547. ],
  548. "dll": "GDI32.dll"
  549. },
  550. {
  551. "imports": [
  552. {
  553. "name": "GetAdaptersInfo",
  554. "address": "0xa9e174"
  555. }
  556. ],
  557. "dll": "iphlpapi.dll"
  558. },
  559. {
  560. "imports": [
  561. {
  562. "name": "LoadLibraryA",
  563. "address": "0xa9e17c"
  564. },
  565. {
  566. "name": "ExitProcess",
  567. "address": "0xa9e180"
  568. },
  569. {
  570. "name": "GetProcAddress",
  571. "address": "0xa9e184"
  572. },
  573. {
  574. "name": "VirtualProtect",
  575. "address": "0xa9e188"
  576. }
  577. ],
  578. "dll": "KERNEL32.DLL"
  579. },
  580. {
  581. "imports": [
  582. {
  583. "name": "OleRun",
  584. "address": "0xa9e190"
  585. }
  586. ],
  587. "dll": "ole32.dll"
  588. },
  589. {
  590. "imports": [
  591. {
  592. "name": "VariantCopy",
  593. "address": "0xa9e198"
  594. }
  595. ],
  596. "dll": "OLEAUT32.dll"
  597. },
  598. {
  599. "imports": [
  600. {
  601. "name": "RasHangUpA",
  602. "address": "0xa9e1a0"
  603. }
  604. ],
  605. "dll": "RASAPI32.dll"
  606. },
  607. {
  608. "imports": [
  609. {
  610. "name": "ShellExecuteA",
  611. "address": "0xa9e1a8"
  612. }
  613. ],
  614. "dll": "SHELL32.dll"
  615. },
  616. {
  617. "imports": [
  618. {
  619. "name": "GetDC",
  620. "address": "0xa9e1b0"
  621. }
  622. ],
  623. "dll": "USER32.dll"
  624. },
  625. {
  626. "imports": [
  627. {
  628. "name": "VerQueryValueA",
  629. "address": "0xa9e1b8"
  630. }
  631. ],
  632. "dll": "VERSION.dll"
  633. },
  634. {
  635. "imports": [
  636. {
  637. "name": "InternetOpenA",
  638. "address": "0xa9e1c0"
  639. }
  640. ],
  641. "dll": "WININET.dll"
  642. },
  643. {
  644. "imports": [
  645. {
  646. "name": "waveOutOpen",
  647. "address": "0xa9e1c8"
  648. }
  649. ],
  650. "dll": "WINMM.dll"
  651. },
  652. {
  653. "imports": [
  654. {
  655. "name": "OpenPrinterA",
  656. "address": "0xa9e1d0"
  657. }
  658. ],
  659. "dll": "WINSPOOL.DRV"
  660. },
  661. {
  662. "imports": [
  663. {
  664. "name": "recvfrom",
  665. "address": "0xa9e1d8"
  666. }
  667. ],
  668. "dll": "WS2_32.dll"
  669. }
  670. ],
  671. "digital_signers": null,
  672. "exported_dll_name": null,
  673. "actual_checksum": "0x00532b7a",
  674. "overlay": null,
  675. "imagebase": "0x00400000",
  676. "reported_checksum": "0x00000000",
  677. "icon_hash": null,
  678. "entrypoint": "0x00a9d5e0",
  679. "timestamp": "2019-07-01 18:18:51",
  680. "osversion": "4.0",
  681. "sections": [
  682. {
  683. "name": "UPX0",
  684. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  685. "virtual_address": "0x00001000",
  686. "size_of_data": "0x00000000",
  687. "entropy": "0.00",
  688. "raw_address": "0x00000400",
  689. "virtual_size": "0x00170000",
  690. "characteristics_raw": "0xe0000080"
  691. },
  692. {
  693. "name": "UPX1",
  694. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  695. "virtual_address": "0x00171000",
  696. "size_of_data": "0x0052c800",
  697. "entropy": "7.82",
  698. "raw_address": "0x00000400",
  699. "virtual_size": "0x0052d000",
  700. "characteristics_raw": "0xe0000040"
  701. },
  702. {
  703. "name": "UPX2",
  704. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  705. "virtual_address": "0x0069e000",
  706. "size_of_data": "0x00000400",
  707. "entropy": "3.70",
  708. "raw_address": "0x0052cc00",
  709. "virtual_size": "0x00001000",
  710. "characteristics_raw": "0xc0000040"
  711. }
  712. ],
  713. "resources": [],
  714. "dirents": [
  715. {
  716. "virtual_address": "0x00000000",
  717. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  718. "size": "0x00000000"
  719. },
  720. {
  721. "virtual_address": "0x0069e000",
  722. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  723. "size": "0x0000037c"
  724. },
  725. {
  726. "virtual_address": "0x00000000",
  727. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  728. "size": "0x00000000"
  729. },
  730. {
  731. "virtual_address": "0x00000000",
  732. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  733. "size": "0x00000000"
  734. },
  735. {
  736. "virtual_address": "0x00000000",
  737. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  738. "size": "0x00000000"
  739. },
  740. {
  741. "virtual_address": "0x00000000",
  742. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  743. "size": "0x00000000"
  744. },
  745. {
  746. "virtual_address": "0x00000000",
  747. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  748. "size": "0x00000000"
  749. },
  750. {
  751. "virtual_address": "0x00000000",
  752. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  753. "size": "0x00000000"
  754. },
  755. {
  756. "virtual_address": "0x00000000",
  757. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  758. "size": "0x00000000"
  759. },
  760. {
  761. "virtual_address": "0x00000000",
  762. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  763. "size": "0x00000000"
  764. },
  765. {
  766. "virtual_address": "0x00000000",
  767. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  768. "size": "0x00000000"
  769. },
  770. {
  771. "virtual_address": "0x00000000",
  772. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  773. "size": "0x00000000"
  774. },
  775. {
  776. "virtual_address": "0x00000000",
  777. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  778. "size": "0x00000000"
  779. },
  780. {
  781. "virtual_address": "0x00000000",
  782. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  783. "size": "0x00000000"
  784. },
  785. {
  786. "virtual_address": "0x00000000",
  787. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  788. "size": "0x00000000"
  789. },
  790. {
  791. "virtual_address": "0x00000000",
  792. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  793. "size": "0x00000000"
  794. }
  795. ],
  796. "exports": [],
  797. "guest_signers": {},
  798. "imphash": "7e8fd41cc4af90fd0b2731fbcc919e1a",
  799. "icon_fuzzy": null,
  800. "icon": null,
  801. "pdbpath": null,
  802. "imported_dll_count": 16,
  803. "versioninfo": []
  804. }
  805. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!