API tools faq
paste
paladin316

Exes_aee7e469f3cb22380018be1f669e2fc3_exe_2019-06-24_11_30.json

paladin316
Jun 24th, 2019
2,252
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 22.54 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 0.0
  5.  
  6. [*] File Name: "Exes_aee7e469f3cb22380018be1f669e2fc3.exe"
  7. [*] File Size: 634880
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. [*] SHA256: "fd71a6b52dca328dc8fb6f7b731d1e932ae5029ae215e358baecd699d2497426"
  10. [*] MD5: "aee7e469f3cb22380018be1f669e2fc3"
  11. [*] SHA1: "2e222325be20329fd3dfd013e1bc6f35a201335e"
  12. [*] SHA512: "bb01a83a9a62b2fce4cfdfbbc1abaa16e28b9fd735ea8b028e8c22484f99ced18fdcc138283ea992ddbcee34f757a543bdcf581c82a1012ee7cda468e9361682"
  13. [*] CRC32: "A0CD54C3"
  14. [*] SSDEEP: "12288:QXdN+0fpJGlWtshBTdHO/zr6iL+mI92h7Uv8KPxoCa3qv:SXfpJ+yulduLrIg7QgCaS"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: []
  19.  
  20. [*] Started Service: []
  21.  
  22. [*] Executed Commands: []
  23.  
  24. [*] Mutexes: []
  25.  
  26. [*] Modified Files: []
  27.  
  28. [*] Deleted Files: []
  29.  
  30. [*] Modified Registry Keys: []
  31.  
  32. [*] Deleted Registry Keys: []
  33.  
  34. [*] DNS Communications: []
  35.  
  36. [*] Domains: []
  37.  
  38. [*] Network Communication - ICMP: []
  39.  
  40. [*] Network Communication - HTTP: []
  41.  
  42. [*] Network Communication - SMTP: []
  43.  
  44. [*] Network Communication - Hosts: []
  45.  
  46. [*] Network Communication - IRC: []
  47.  
  48. [*] Static Analysis: {
  49. "pe": {
  50. "peid_signatures": null,
  51. "imports": [
  52. {
  53. "imports": [
  54. {
  55. "name": null,
  56. "address": "0x401000"
  57. },
  58. {
  59. "name": "MethCallEngine",
  60. "address": "0x401004"
  61. },
  62. {
  63. "name": null,
  64. "address": "0x401008"
  65. },
  66. {
  67. "name": null,
  68. "address": "0x40100c"
  69. },
  70. {
  71. "name": null,
  72. "address": "0x401010"
  73. },
  74. {
  75. "name": null,
  76. "address": "0x401014"
  77. },
  78. {
  79. "name": null,
  80. "address": "0x401018"
  81. },
  82. {
  83. "name": null,
  84. "address": "0x40101c"
  85. },
  86. {
  87. "name": null,
  88. "address": "0x401020"
  89. },
  90. {
  91. "name": null,
  92. "address": "0x401024"
  93. },
  94. {
  95. "name": null,
  96. "address": "0x401028"
  97. },
  98. {
  99. "name": null,
  100. "address": "0x40102c"
  101. },
  102. {
  103. "name": null,
  104. "address": "0x401030"
  105. },
  106. {
  107. "name": null,
  108. "address": "0x401034"
  109. },
  110. {
  111. "name": null,
  112. "address": "0x401038"
  113. },
  114. {
  115. "name": "EVENT_SINK_AddRef",
  116. "address": "0x40103c"
  117. },
  118. {
  119. "name": null,
  120. "address": "0x401040"
  121. },
  122. {
  123. "name": null,
  124. "address": "0x401044"
  125. },
  126. {
  127. "name": null,
  128. "address": "0x401048"
  129. },
  130. {
  131. "name": "EVENT_SINK_Release",
  132. "address": "0x40104c"
  133. },
  134. {
  135. "name": null,
  136. "address": "0x401050"
  137. },
  138. {
  139. "name": "EVENT_SINK_QueryInterface",
  140. "address": "0x401054"
  141. },
  142. {
  143. "name": "__vbaExceptHandler",
  144. "address": "0x401058"
  145. },
  146. {
  147. "name": null,
  148. "address": "0x40105c"
  149. },
  150. {
  151. "name": null,
  152. "address": "0x401060"
  153. },
  154. {
  155. "name": null,
  156. "address": "0x401064"
  157. },
  158. {
  159. "name": null,
  160. "address": "0x401068"
  161. },
  162. {
  163. "name": null,
  164. "address": "0x40106c"
  165. },
  166. {
  167. "name": null,
  168. "address": "0x401070"
  169. },
  170. {
  171. "name": null,
  172. "address": "0x401074"
  173. },
  174. {
  175. "name": null,
  176. "address": "0x401078"
  177. },
  178. {
  179. "name": null,
  180. "address": "0x40107c"
  181. },
  182. {
  183. "name": null,
  184. "address": "0x401080"
  185. },
  186. {
  187. "name": null,
  188. "address": "0x401084"
  189. },
  190. {
  191. "name": null,
  192. "address": "0x401088"
  193. },
  194. {
  195. "name": null,
  196. "address": "0x40108c"
  197. },
  198. {
  199. "name": null,
  200. "address": "0x401090"
  201. },
  202. {
  203. "name": null,
  204. "address": "0x401094"
  205. },
  206. {
  207. "name": null,
  208. "address": "0x401098"
  209. },
  210. {
  211. "name": null,
  212. "address": "0x40109c"
  213. },
  214. {
  215. "name": null,
  216. "address": "0x4010a0"
  217. },
  218. {
  219. "name": null,
  220. "address": "0x4010a4"
  221. },
  222. {
  223. "name": null,
  224. "address": "0x4010a8"
  225. },
  226. {
  227. "name": null,
  228. "address": "0x4010ac"
  229. },
  230. {
  231. "name": null,
  232. "address": "0x4010b0"
  233. },
  234. {
  235. "name": null,
  236. "address": "0x4010b4"
  237. }
  238. ],
  239. "dll": "MSVBVM60.DLL"
  240. }
  241. ],
  242. "digital_signers": null,
  243. "exported_dll_name": null,
  244. "actual_checksum": "0x000a3347",
  245. "overlay": null,
  246. "imagebase": "0x00400000",
  247. "reported_checksum": "0x000a3347",
  248. "icon_hash": null,
  249. "entrypoint": "0x004011d4",
  250. "timestamp": "2006-05-16 12:21:48",
  251. "osversion": "4.0",
  252. "sections": [
  253. {
  254. "name": ".text",
  255. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  256. "virtual_address": "0x00001000",
  257. "size_of_data": "0x00092000",
  258. "entropy": "5.92",
  259. "raw_address": "0x00001000",
  260. "virtual_size": "0x000910b4",
  261. "characteristics_raw": "0x60000020"
  262. },
  263. {
  264. "name": ".data",
  265. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  266. "virtual_address": "0x00093000",
  267. "size_of_data": "0x00000000",
  268. "entropy": "0.00",
  269. "raw_address": "0x00000000",
  270. "virtual_size": "0x00004cc4",
  271. "characteristics_raw": "0xc0000040"
  272. },
  273. {
  274. "name": ".rsrc",
  275. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  276. "virtual_address": "0x00098000",
  277. "size_of_data": "0x00008000",
  278. "entropy": "4.49",
  279. "raw_address": "0x00093000",
  280. "virtual_size": "0x000072f4",
  281. "characteristics_raw": "0x40000040"
  282. }
  283. ],
  284. "resources": [],
  285. "dirents": [
  286. {
  287. "virtual_address": "0x00000000",
  288. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  289. "size": "0x00000000"
  290. },
  291. {
  292. "virtual_address": "0x00091f54",
  293. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  294. "size": "0x00000028"
  295. },
  296. {
  297. "virtual_address": "0x00098000",
  298. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  299. "size": "0x000072f4"
  300. },
  301. {
  302. "virtual_address": "0x00000000",
  303. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  304. "size": "0x00000000"
  305. },
  306. {
  307. "virtual_address": "0x00000000",
  308. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  309. "size": "0x00000000"
  310. },
  311. {
  312. "virtual_address": "0x00000000",
  313. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  314. "size": "0x00000000"
  315. },
  316. {
  317. "virtual_address": "0x00000000",
  318. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  319. "size": "0x00000000"
  320. },
  321. {
  322. "virtual_address": "0x00000000",
  323. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  324. "size": "0x00000000"
  325. },
  326. {
  327. "virtual_address": "0x00000000",
  328. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  329. "size": "0x00000000"
  330. },
  331. {
  332. "virtual_address": "0x00000000",
  333. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  334. "size": "0x00000000"
  335. },
  336. {
  337. "virtual_address": "0x00000000",
  338. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  339. "size": "0x00000000"
  340. },
  341. {
  342. "virtual_address": "0x00000220",
  343. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  344. "size": "0x00000020"
  345. },
  346. {
  347. "virtual_address": "0x00001000",
  348. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  349. "size": "0x000000bc"
  350. },
  351. {
  352. "virtual_address": "0x00000000",
  353. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  354. "size": "0x00000000"
  355. },
  356. {
  357. "virtual_address": "0x00000000",
  358. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  359. "size": "0x00000000"
  360. },
  361. {
  362. "virtual_address": "0x00000000",
  363. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  364. "size": "0x00000000"
  365. }
  366. ],
  367. "exports": [],
  368. "guest_signers": {},
  369. "imphash": "ee266edfc71ea2a792b7869fc8f472c4",
  370. "icon_fuzzy": null,
  371. "icon": null,
  372. "pdbpath": null,
  373. "imported_dll_count": 1,
  374. "versioninfo": []
  375. }
  376. }
  377.  
  378. [*] Resolved APIs: []
  379.  
  380. [*] Static Analysis: {
  381. "pe": {
  382. "peid_signatures": null,
  383. "imports": [
  384. {
  385. "imports": [
  386. {
  387. "name": null,
  388. "address": "0x401000"
  389. },
  390. {
  391. "name": "MethCallEngine",
  392. "address": "0x401004"
  393. },
  394. {
  395. "name": null,
  396. "address": "0x401008"
  397. },
  398. {
  399. "name": null,
  400. "address": "0x40100c"
  401. },
  402. {
  403. "name": null,
  404. "address": "0x401010"
  405. },
  406. {
  407. "name": null,
  408. "address": "0x401014"
  409. },
  410. {
  411. "name": null,
  412. "address": "0x401018"
  413. },
  414. {
  415. "name": null,
  416. "address": "0x40101c"
  417. },
  418. {
  419. "name": null,
  420. "address": "0x401020"
  421. },
  422. {
  423. "name": null,
  424. "address": "0x401024"
  425. },
  426. {
  427. "name": null,
  428. "address": "0x401028"
  429. },
  430. {
  431. "name": null,
  432. "address": "0x40102c"
  433. },
  434. {
  435. "name": null,
  436. "address": "0x401030"
  437. },
  438. {
  439. "name": null,
  440. "address": "0x401034"
  441. },
  442. {
  443. "name": null,
  444. "address": "0x401038"
  445. },
  446. {
  447. "name": "EVENT_SINK_AddRef",
  448. "address": "0x40103c"
  449. },
  450. {
  451. "name": null,
  452. "address": "0x401040"
  453. },
  454. {
  455. "name": null,
  456. "address": "0x401044"
  457. },
  458. {
  459. "name": null,
  460. "address": "0x401048"
  461. },
  462. {
  463. "name": "EVENT_SINK_Release",
  464. "address": "0x40104c"
  465. },
  466. {
  467. "name": null,
  468. "address": "0x401050"
  469. },
  470. {
  471. "name": "EVENT_SINK_QueryInterface",
  472. "address": "0x401054"
  473. },
  474. {
  475. "name": "__vbaExceptHandler",
  476. "address": "0x401058"
  477. },
  478. {
  479. "name": null,
  480. "address": "0x40105c"
  481. },
  482. {
  483. "name": null,
  484. "address": "0x401060"
  485. },
  486. {
  487. "name": null,
  488. "address": "0x401064"
  489. },
  490. {
  491. "name": null,
  492. "address": "0x401068"
  493. },
  494. {
  495. "name": null,
  496. "address": "0x40106c"
  497. },
  498. {
  499. "name": null,
  500. "address": "0x401070"
  501. },
  502. {
  503. "name": null,
  504. "address": "0x401074"
  505. },
  506. {
  507. "name": null,
  508. "address": "0x401078"
  509. },
  510. {
  511. "name": null,
  512. "address": "0x40107c"
  513. },
  514. {
  515. "name": null,
  516. "address": "0x401080"
  517. },
  518. {
  519. "name": null,
  520. "address": "0x401084"
  521. },
  522. {
  523. "name": null,
  524. "address": "0x401088"
  525. },
  526. {
  527. "name": null,
  528. "address": "0x40108c"
  529. },
  530. {
  531. "name": null,
  532. "address": "0x401090"
  533. },
  534. {
  535. "name": null,
  536. "address": "0x401094"
  537. },
  538. {
  539. "name": null,
  540. "address": "0x401098"
  541. },
  542. {
  543. "name": null,
  544. "address": "0x40109c"
  545. },
  546. {
  547. "name": null,
  548. "address": "0x4010a0"
  549. },
  550. {
  551. "name": null,
  552. "address": "0x4010a4"
  553. },
  554. {
  555. "name": null,
  556. "address": "0x4010a8"
  557. },
  558. {
  559. "name": null,
  560. "address": "0x4010ac"
  561. },
  562. {
  563. "name": null,
  564. "address": "0x4010b0"
  565. },
  566. {
  567. "name": null,
  568. "address": "0x4010b4"
  569. }
  570. ],
  571. "dll": "MSVBVM60.DLL"
  572. }
  573. ],
  574. "digital_signers": null,
  575. "exported_dll_name": null,
  576. "actual_checksum": "0x000a3347",
  577. "overlay": null,
  578. "imagebase": "0x00400000",
  579. "reported_checksum": "0x000a3347",
  580. "icon_hash": null,
  581. "entrypoint": "0x004011d4",
  582. "timestamp": "2006-05-16 12:21:48",
  583. "osversion": "4.0",
  584. "sections": [
  585. {
  586. "name": ".text",
  587. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  588. "virtual_address": "0x00001000",
  589. "size_of_data": "0x00092000",
  590. "entropy": "5.92",
  591. "raw_address": "0x00001000",
  592. "virtual_size": "0x000910b4",
  593. "characteristics_raw": "0x60000020"
  594. },
  595. {
  596. "name": ".data",
  597. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  598. "virtual_address": "0x00093000",
  599. "size_of_data": "0x00000000",
  600. "entropy": "0.00",
  601. "raw_address": "0x00000000",
  602. "virtual_size": "0x00004cc4",
  603. "characteristics_raw": "0xc0000040"
  604. },
  605. {
  606. "name": ".rsrc",
  607. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  608. "virtual_address": "0x00098000",
  609. "size_of_data": "0x00008000",
  610. "entropy": "4.49",
  611. "raw_address": "0x00093000",
  612. "virtual_size": "0x000072f4",
  613. "characteristics_raw": "0x40000040"
  614. }
  615. ],
  616. "resources": [],
  617. "dirents": [
  618. {
  619. "virtual_address": "0x00000000",
  620. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  621. "size": "0x00000000"
  622. },
  623. {
  624. "virtual_address": "0x00091f54",
  625. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  626. "size": "0x00000028"
  627. },
  628. {
  629. "virtual_address": "0x00098000",
  630. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  631. "size": "0x000072f4"
  632. },
  633. {
  634. "virtual_address": "0x00000000",
  635. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  636. "size": "0x00000000"
  637. },
  638. {
  639. "virtual_address": "0x00000000",
  640. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  641. "size": "0x00000000"
  642. },
  643. {
  644. "virtual_address": "0x00000000",
  645. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  646. "size": "0x00000000"
  647. },
  648. {
  649. "virtual_address": "0x00000000",
  650. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  651. "size": "0x00000000"
  652. },
  653. {
  654. "virtual_address": "0x00000000",
  655. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  656. "size": "0x00000000"
  657. },
  658. {
  659. "virtual_address": "0x00000000",
  660. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  661. "size": "0x00000000"
  662. },
  663. {
  664. "virtual_address": "0x00000000",
  665. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  666. "size": "0x00000000"
  667. },
  668. {
  669. "virtual_address": "0x00000000",
  670. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  671. "size": "0x00000000"
  672. },
  673. {
  674. "virtual_address": "0x00000220",
  675. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  676. "size": "0x00000020"
  677. },
  678. {
  679. "virtual_address": "0x00001000",
  680. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  681. "size": "0x000000bc"
  682. },
  683. {
  684. "virtual_address": "0x00000000",
  685. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  686. "size": "0x00000000"
  687. },
  688. {
  689. "virtual_address": "0x00000000",
  690. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  691. "size": "0x00000000"
  692. },
  693. {
  694. "virtual_address": "0x00000000",
  695. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  696. "size": "0x00000000"
  697. }
  698. ],
  699. "exports": [],
  700. "guest_signers": {},
  701. "imphash": "ee266edfc71ea2a792b7869fc8f472c4",
  702. "icon_fuzzy": null,
  703. "icon": null,
  704. "pdbpath": null,
  705. "imported_dll_count": 1,
  706. "versioninfo": []
  707. }
  708. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!