API tools faq
paste
paladin316

Exes_ccf5b663061e7e2755f8eed37e49b732_exe_2019-07-02_14_30.json

paladin316
Jul 2nd, 2019
2,174
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.42 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_ccf5b663061e7e2755f8eed37e49b732.exe"
  7. [*] File Size: 5427200
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed"
  9. [*] SHA256: "f9a972757cd0d8a837eb30f6a28bc9b5e2a6674825b18359648c50bbb7d6d74a"
  10. [*] MD5: "ccf5b663061e7e2755f8eed37e49b732"
  11. [*] SHA1: "6176da306c6557a27641d34047d82f40cddf5cf7"
  12. [*] SHA512: "0a14cdad86888ca7fe977ff88a3e9315da5866f8330af8282aa9bdd49ad75bde4ed08b87b089cce48a6862f33be4f819289216af315176e5f25cd6c4cc229198"
  13. [*] CRC32: "15289F93"
  14. [*] SSDEEP: "98304:1dLG+QUvfklNE8lHIMVpboQuiA0qhKLgfGKPsvXFshyNvjxE77K5kMn/Gead8h5n:fG+QVe9jhKLgfGKcNFi+7nH4P0QzRAen"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: UPX1, entropy: 7.82, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x0052c800, virtual_size: 0x0052d000"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "The executable is compressed using UPX",
  29. "Details": [
  30. {
  31. "section": "name: UPX0, entropy: 0.00, characteristics: IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00000000, virtual_size: 0x00170000"
  32. }
  33. ]
  34. },
  35. {
  36. "Description": "File has been identified by 47 Antiviruses on VirusTotal as malicious",
  37. "Details": [
  38. {
  39. "MicroWorld-eScan": "Generic.Backdoor.Torr.94C32930"
  40. },
  41. {
  42. "CAT-QuickHeal": "Trojanpws.Qqpass.16543"
  43. },
  44. {
  45. "ALYac": "Generic.Backdoor.Torr.94C32930"
  46. },
  47. {
  48. "Malwarebytes": "Trojan.BitCoinMiner"
  49. },
  50. {
  51. "AegisLab": "Trojan.Multi.Generic.lpKS"
  52. },
  53. {
  54. "Alibaba": "VirTool:Win32/CeeInject.84035381"
  55. },
  56. {
  57. "Arcabit": "Generic.Backdoor.Torr.94C32930"
  58. },
  59. {
  60. "F-Prot": "W32/Trojan.CLL.gen!Eldorado"
  61. },
  62. {
  63. "Symantec": "Hacktool.Mimikatz"
  64. },
  65. {
  66. "APEX": "Malicious"
  67. },
  68. {
  69. "ClamAV": "Win.Exploit.EQGRP-6322722-0"
  70. },
  71. {
  72. "Kaspersky": "HEUR:Exploit.Win32.MS17-010.gen"
  73. },
  74. {
  75. "BitDefender": "Generic.Backdoor.Torr.94C32930"
  76. },
  77. {
  78. "Avast": "Win32:Malware-gen"
  79. },
  80. {
  81. "Ad-Aware": "Generic.Backdoor.Torr.94C32930"
  82. },
  83. {
  84. "Emsisoft": "Generic.Backdoor.Torr.94C32930 (B)"
  85. },
  86. {
  87. "Comodo": "Packed.Win32.MUPX.Gen@24tbus"
  88. },
  89. {
  90. "DrWeb": "Trojan.Equation.77"
  91. },
  92. {
  93. "TrendMicro": "TROJ_GEN.R002C0DG219"
  94. },
  95. {
  96. "McAfee-GW-Edition": "BehavesLike.Win32.Trojan.tc"
  97. },
  98. {
  99. "Trapmine": "malicious.high.ml.score"
  100. },
  101. {
  102. "FireEye": "Generic.mg.ccf5b663061e7e27"
  103. },
  104. {
  105. "Sophos": "Mal/Behav-004"
  106. },
  107. {
  108. "SentinelOne": "DFI - Malicious PE"
  109. },
  110. {
  111. "Cyren": "W32/Trojan.CLL.gen!Eldorado"
  112. },
  113. {
  114. "Avira": "HEUR/AGEN.1014767"
  115. },
  116. {
  117. "Antiy-AVL": "GrayWare/Win32.FlyStudio.a"
  118. },
  119. {
  120. "Microsoft": "VirTool:Win32/CeeInject.SN!bit"
  121. },
  122. {
  123. "Endgame": "malicious (moderate confidence)"
  124. },
  125. {
  126. "ZoneAlarm": "HEUR:Exploit.Win32.MS17-010.gen"
  127. },
  128. {
  129. "GData": "Win32.Trojan.FlyStudio.F"
  130. },
  131. {
  132. "AhnLab-V3": "Malware/Win32.Generic.C3246619"
  133. },
  134. {
  135. "Acronis": "suspicious"
  136. },
  137. {
  138. "McAfee": "Artemis!CCF5B663061E"
  139. },
  140. {
  141. "MAX": "malware (ai score=94)"
  142. },
  143. {
  144. "VBA32": "BScope.Adware.Wajam"
  145. },
  146. {
  147. "Cylance": "Unsafe"
  148. },
  149. {
  150. "ESET-NOD32": "a variant of Win32/CoinMiner.BUJ"
  151. },
  152. {
  153. "TrendMicro-HouseCall": "TROJ_GEN.R002C0DG219"
  154. },
  155. {
  156. "Rising": "Exploit.MS17-010!8.E85D (CLOUD)"
  157. },
  158. {
  159. "Ikarus": "Trojan-PSW.QQpass"
  160. },
  161. {
  162. "eGambit": "hacktool.mimikatz"
  163. },
  164. {
  165. "Fortinet": "W32/CoinMiner.BUJ!tr"
  166. },
  167. {
  168. "AVG": "Win32:Malware-gen"
  169. },
  170. {
  171. "Cybereason": "malicious.3061e7"
  172. },
  173. {
  174. "CrowdStrike": "win/malicious_confidence_90% (W)"
  175. },
  176. {
  177. "Qihoo-360": "Win32/Trojan.Exploit.46b"
  178. }
  179. ]
  180. },
  181. {
  182. "Description": "Clamav Hits in Target/Dropped/SuriExtracted",
  183. "Details": [
  184. {
  185. "target": "clamav:Win.Exploit.EQGRP-6322722-0, sha256:f9a972757cd0d8a837eb30f6a28bc9b5e2a6674825b18359648c50bbb7d6d74a, type:PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed"
  186. }
  187. ]
  188. }
  189. ]
  190.  
  191. [*] Started Service: []
  192.  
  193. [*] Executed Commands: []
  194.  
  195. [*] Mutexes: []
  196.  
  197. [*] Modified Files: []
  198.  
  199. [*] Deleted Files: []
  200.  
  201. [*] Modified Registry Keys: []
  202.  
  203. [*] Deleted Registry Keys: []
  204.  
  205. [*] DNS Communications: []
  206.  
  207. [*] Domains: []
  208.  
  209. [*] Network Communication - ICMP: []
  210.  
  211. [*] Network Communication - HTTP: []
  212.  
  213. [*] Network Communication - SMTP: []
  214.  
  215. [*] Network Communication - Hosts: []
  216.  
  217. [*] Network Communication - IRC: []
  218.  
  219. [*] Static Analysis: {
  220. "pe": {
  221. "peid_signatures": null,
  222. "imports": [
  223. {
  224. "imports": [
  225. {
  226. "name": "RegCloseKey",
  227. "address": "0xa9e154"
  228. }
  229. ],
  230. "dll": "ADVAPI32.dll"
  231. },
  232. {
  233. "imports": [
  234. {
  235. "name": null,
  236. "address": "0xa9e15c"
  237. }
  238. ],
  239. "dll": "COMCTL32.dll"
  240. },
  241. {
  242. "imports": [
  243. {
  244. "name": "ChooseColorA",
  245. "address": "0xa9e164"
  246. }
  247. ],
  248. "dll": "comdlg32.dll"
  249. },
  250. {
  251. "imports": [
  252. {
  253. "name": "Escape",
  254. "address": "0xa9e16c"
  255. }
  256. ],
  257. "dll": "GDI32.dll"
  258. },
  259. {
  260. "imports": [
  261. {
  262. "name": "GetAdaptersInfo",
  263. "address": "0xa9e174"
  264. }
  265. ],
  266. "dll": "iphlpapi.dll"
  267. },
  268. {
  269. "imports": [
  270. {
  271. "name": "LoadLibraryA",
  272. "address": "0xa9e17c"
  273. },
  274. {
  275. "name": "ExitProcess",
  276. "address": "0xa9e180"
  277. },
  278. {
  279. "name": "GetProcAddress",
  280. "address": "0xa9e184"
  281. },
  282. {
  283. "name": "VirtualProtect",
  284. "address": "0xa9e188"
  285. }
  286. ],
  287. "dll": "KERNEL32.DLL"
  288. },
  289. {
  290. "imports": [
  291. {
  292. "name": "OleRun",
  293. "address": "0xa9e190"
  294. }
  295. ],
  296. "dll": "ole32.dll"
  297. },
  298. {
  299. "imports": [
  300. {
  301. "name": "VariantCopy",
  302. "address": "0xa9e198"
  303. }
  304. ],
  305. "dll": "OLEAUT32.dll"
  306. },
  307. {
  308. "imports": [
  309. {
  310. "name": "RasHangUpA",
  311. "address": "0xa9e1a0"
  312. }
  313. ],
  314. "dll": "RASAPI32.dll"
  315. },
  316. {
  317. "imports": [
  318. {
  319. "name": "ShellExecuteA",
  320. "address": "0xa9e1a8"
  321. }
  322. ],
  323. "dll": "SHELL32.dll"
  324. },
  325. {
  326. "imports": [
  327. {
  328. "name": "GetDC",
  329. "address": "0xa9e1b0"
  330. }
  331. ],
  332. "dll": "USER32.dll"
  333. },
  334. {
  335. "imports": [
  336. {
  337. "name": "VerQueryValueA",
  338. "address": "0xa9e1b8"
  339. }
  340. ],
  341. "dll": "VERSION.dll"
  342. },
  343. {
  344. "imports": [
  345. {
  346. "name": "InternetOpenA",
  347. "address": "0xa9e1c0"
  348. }
  349. ],
  350. "dll": "WININET.dll"
  351. },
  352. {
  353. "imports": [
  354. {
  355. "name": "waveOutOpen",
  356. "address": "0xa9e1c8"
  357. }
  358. ],
  359. "dll": "WINMM.dll"
  360. },
  361. {
  362. "imports": [
  363. {
  364. "name": "OpenPrinterA",
  365. "address": "0xa9e1d0"
  366. }
  367. ],
  368. "dll": "WINSPOOL.DRV"
  369. },
  370. {
  371. "imports": [
  372. {
  373. "name": "recvfrom",
  374. "address": "0xa9e1d8"
  375. }
  376. ],
  377. "dll": "WS2_32.dll"
  378. }
  379. ],
  380. "digital_signers": null,
  381. "exported_dll_name": null,
  382. "actual_checksum": "0x00532b7a",
  383. "overlay": null,
  384. "imagebase": "0x00400000",
  385. "reported_checksum": "0x00000000",
  386. "icon_hash": null,
  387. "entrypoint": "0x00a9d5e0",
  388. "timestamp": "2019-07-01 18:18:51",
  389. "osversion": "4.0",
  390. "sections": [
  391. {
  392. "name": "UPX0",
  393. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  394. "virtual_address": "0x00001000",
  395. "size_of_data": "0x00000000",
  396. "entropy": "0.00",
  397. "raw_address": "0x00000400",
  398. "virtual_size": "0x00170000",
  399. "characteristics_raw": "0xe0000080"
  400. },
  401. {
  402. "name": "UPX1",
  403. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  404. "virtual_address": "0x00171000",
  405. "size_of_data": "0x0052c800",
  406. "entropy": "7.82",
  407. "raw_address": "0x00000400",
  408. "virtual_size": "0x0052d000",
  409. "characteristics_raw": "0xe0000040"
  410. },
  411. {
  412. "name": "UPX2",
  413. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  414. "virtual_address": "0x0069e000",
  415. "size_of_data": "0x00000400",
  416. "entropy": "3.70",
  417. "raw_address": "0x0052cc00",
  418. "virtual_size": "0x00001000",
  419. "characteristics_raw": "0xc0000040"
  420. }
  421. ],
  422. "resources": [],
  423. "dirents": [
  424. {
  425. "virtual_address": "0x00000000",
  426. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  427. "size": "0x00000000"
  428. },
  429. {
  430. "virtual_address": "0x0069e000",
  431. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  432. "size": "0x0000037c"
  433. },
  434. {
  435. "virtual_address": "0x00000000",
  436. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  437. "size": "0x00000000"
  438. },
  439. {
  440. "virtual_address": "0x00000000",
  441. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  442. "size": "0x00000000"
  443. },
  444. {
  445. "virtual_address": "0x00000000",
  446. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  447. "size": "0x00000000"
  448. },
  449. {
  450. "virtual_address": "0x00000000",
  451. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  452. "size": "0x00000000"
  453. },
  454. {
  455. "virtual_address": "0x00000000",
  456. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  457. "size": "0x00000000"
  458. },
  459. {
  460. "virtual_address": "0x00000000",
  461. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  462. "size": "0x00000000"
  463. },
  464. {
  465. "virtual_address": "0x00000000",
  466. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  467. "size": "0x00000000"
  468. },
  469. {
  470. "virtual_address": "0x00000000",
  471. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  472. "size": "0x00000000"
  473. },
  474. {
  475. "virtual_address": "0x00000000",
  476. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  477. "size": "0x00000000"
  478. },
  479. {
  480. "virtual_address": "0x00000000",
  481. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  482. "size": "0x00000000"
  483. },
  484. {
  485. "virtual_address": "0x00000000",
  486. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  487. "size": "0x00000000"
  488. },
  489. {
  490. "virtual_address": "0x00000000",
  491. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  492. "size": "0x00000000"
  493. },
  494. {
  495. "virtual_address": "0x00000000",
  496. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  497. "size": "0x00000000"
  498. },
  499. {
  500. "virtual_address": "0x00000000",
  501. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  502. "size": "0x00000000"
  503. }
  504. ],
  505. "exports": [],
  506. "guest_signers": {},
  507. "imphash": "7e8fd41cc4af90fd0b2731fbcc919e1a",
  508. "icon_fuzzy": null,
  509. "icon": null,
  510. "pdbpath": null,
  511. "imported_dll_count": 16,
  512. "versioninfo": []
  513. }
  514. }
  515.  
  516. [*] Resolved APIs: []
  517.  
  518. [*] Static Analysis: {
  519. "pe": {
  520. "peid_signatures": null,
  521. "imports": [
  522. {
  523. "imports": [
  524. {
  525. "name": "RegCloseKey",
  526. "address": "0xa9e154"
  527. }
  528. ],
  529. "dll": "ADVAPI32.dll"
  530. },
  531. {
  532. "imports": [
  533. {
  534. "name": null,
  535. "address": "0xa9e15c"
  536. }
  537. ],
  538. "dll": "COMCTL32.dll"
  539. },
  540. {
  541. "imports": [
  542. {
  543. "name": "ChooseColorA",
  544. "address": "0xa9e164"
  545. }
  546. ],
  547. "dll": "comdlg32.dll"
  548. },
  549. {
  550. "imports": [
  551. {
  552. "name": "Escape",
  553. "address": "0xa9e16c"
  554. }
  555. ],
  556. "dll": "GDI32.dll"
  557. },
  558. {
  559. "imports": [
  560. {
  561. "name": "GetAdaptersInfo",
  562. "address": "0xa9e174"
  563. }
  564. ],
  565. "dll": "iphlpapi.dll"
  566. },
  567. {
  568. "imports": [
  569. {
  570. "name": "LoadLibraryA",
  571. "address": "0xa9e17c"
  572. },
  573. {
  574. "name": "ExitProcess",
  575. "address": "0xa9e180"
  576. },
  577. {
  578. "name": "GetProcAddress",
  579. "address": "0xa9e184"
  580. },
  581. {
  582. "name": "VirtualProtect",
  583. "address": "0xa9e188"
  584. }
  585. ],
  586. "dll": "KERNEL32.DLL"
  587. },
  588. {
  589. "imports": [
  590. {
  591. "name": "OleRun",
  592. "address": "0xa9e190"
  593. }
  594. ],
  595. "dll": "ole32.dll"
  596. },
  597. {
  598. "imports": [
  599. {
  600. "name": "VariantCopy",
  601. "address": "0xa9e198"
  602. }
  603. ],
  604. "dll": "OLEAUT32.dll"
  605. },
  606. {
  607. "imports": [
  608. {
  609. "name": "RasHangUpA",
  610. "address": "0xa9e1a0"
  611. }
  612. ],
  613. "dll": "RASAPI32.dll"
  614. },
  615. {
  616. "imports": [
  617. {
  618. "name": "ShellExecuteA",
  619. "address": "0xa9e1a8"
  620. }
  621. ],
  622. "dll": "SHELL32.dll"
  623. },
  624. {
  625. "imports": [
  626. {
  627. "name": "GetDC",
  628. "address": "0xa9e1b0"
  629. }
  630. ],
  631. "dll": "USER32.dll"
  632. },
  633. {
  634. "imports": [
  635. {
  636. "name": "VerQueryValueA",
  637. "address": "0xa9e1b8"
  638. }
  639. ],
  640. "dll": "VERSION.dll"
  641. },
  642. {
  643. "imports": [
  644. {
  645. "name": "InternetOpenA",
  646. "address": "0xa9e1c0"
  647. }
  648. ],
  649. "dll": "WININET.dll"
  650. },
  651. {
  652. "imports": [
  653. {
  654. "name": "waveOutOpen",
  655. "address": "0xa9e1c8"
  656. }
  657. ],
  658. "dll": "WINMM.dll"
  659. },
  660. {
  661. "imports": [
  662. {
  663. "name": "OpenPrinterA",
  664. "address": "0xa9e1d0"
  665. }
  666. ],
  667. "dll": "WINSPOOL.DRV"
  668. },
  669. {
  670. "imports": [
  671. {
  672. "name": "recvfrom",
  673. "address": "0xa9e1d8"
  674. }
  675. ],
  676. "dll": "WS2_32.dll"
  677. }
  678. ],
  679. "digital_signers": null,
  680. "exported_dll_name": null,
  681. "actual_checksum": "0x00532b7a",
  682. "overlay": null,
  683. "imagebase": "0x00400000",
  684. "reported_checksum": "0x00000000",
  685. "icon_hash": null,
  686. "entrypoint": "0x00a9d5e0",
  687. "timestamp": "2019-07-01 18:18:51",
  688. "osversion": "4.0",
  689. "sections": [
  690. {
  691. "name": "UPX0",
  692. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  693. "virtual_address": "0x00001000",
  694. "size_of_data": "0x00000000",
  695. "entropy": "0.00",
  696. "raw_address": "0x00000400",
  697. "virtual_size": "0x00170000",
  698. "characteristics_raw": "0xe0000080"
  699. },
  700. {
  701. "name": "UPX1",
  702. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  703. "virtual_address": "0x00171000",
  704. "size_of_data": "0x0052c800",
  705. "entropy": "7.82",
  706. "raw_address": "0x00000400",
  707. "virtual_size": "0x0052d000",
  708. "characteristics_raw": "0xe0000040"
  709. },
  710. {
  711. "name": "UPX2",
  712. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  713. "virtual_address": "0x0069e000",
  714. "size_of_data": "0x00000400",
  715. "entropy": "3.70",
  716. "raw_address": "0x0052cc00",
  717. "virtual_size": "0x00001000",
  718. "characteristics_raw": "0xc0000040"
  719. }
  720. ],
  721. "resources": [],
  722. "dirents": [
  723. {
  724. "virtual_address": "0x00000000",
  725. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  726. "size": "0x00000000"
  727. },
  728. {
  729. "virtual_address": "0x0069e000",
  730. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  731. "size": "0x0000037c"
  732. },
  733. {
  734. "virtual_address": "0x00000000",
  735. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  736. "size": "0x00000000"
  737. },
  738. {
  739. "virtual_address": "0x00000000",
  740. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  741. "size": "0x00000000"
  742. },
  743. {
  744. "virtual_address": "0x00000000",
  745. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  746. "size": "0x00000000"
  747. },
  748. {
  749. "virtual_address": "0x00000000",
  750. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  751. "size": "0x00000000"
  752. },
  753. {
  754. "virtual_address": "0x00000000",
  755. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  756. "size": "0x00000000"
  757. },
  758. {
  759. "virtual_address": "0x00000000",
  760. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  761. "size": "0x00000000"
  762. },
  763. {
  764. "virtual_address": "0x00000000",
  765. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  766. "size": "0x00000000"
  767. },
  768. {
  769. "virtual_address": "0x00000000",
  770. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  771. "size": "0x00000000"
  772. },
  773. {
  774. "virtual_address": "0x00000000",
  775. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  776. "size": "0x00000000"
  777. },
  778. {
  779. "virtual_address": "0x00000000",
  780. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  781. "size": "0x00000000"
  782. },
  783. {
  784. "virtual_address": "0x00000000",
  785. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  786. "size": "0x00000000"
  787. },
  788. {
  789. "virtual_address": "0x00000000",
  790. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  791. "size": "0x00000000"
  792. },
  793. {
  794. "virtual_address": "0x00000000",
  795. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  796. "size": "0x00000000"
  797. },
  798. {
  799. "virtual_address": "0x00000000",
  800. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  801. "size": "0x00000000"
  802. }
  803. ],
  804. "exports": [],
  805. "guest_signers": {},
  806. "imphash": "7e8fd41cc4af90fd0b2731fbcc919e1a",
  807. "icon_fuzzy": null,
  808. "icon": null,
  809. "pdbpath": null,
  810. "imported_dll_count": 16,
  811. "versioninfo": []
  812. }
  813. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!