API tools faq
paste
paladin316

Exes_1756b1aeae6553a9bd995d204fc6d91b_exe_2019-06-24_14_30.json

paladin316
Jun 24th, 2019
2,236
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 19.00 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 0.0
  5.  
  6. [*] File Name: "Exes_1756b1aeae6553a9bd995d204fc6d91b.exe"
  7. [*] File Size: 507904
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. [*] SHA256: "5383cf9111e378dcfb3b20c7588092b7b72d0756eecc4f5197ba7aacba807ea0"
  10. [*] MD5: "1756b1aeae6553a9bd995d204fc6d91b"
  11. [*] SHA1: "1e2f230bfbe1c3443e4c5484f3a02846ce3be353"
  12. [*] SHA512: "478fcf31ee6e1ee3133a9e8fd02f96a7afd9f6126d591ea17d6b49404326fc05500e1163d67301539584df30223634ca27e1a9171a30273c9509053d1adedfc2"
  13. [*] CRC32: "3053DBAC"
  14. [*] SSDEEP: "12288:u9W0HIxd4VgMfkILSGyfHwUGzNFj2iPU3t:uIxdwgMfzWxoUGzNpS"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: []
  19.  
  20. [*] Started Service: []
  21.  
  22. [*] Executed Commands: []
  23.  
  24. [*] Mutexes: []
  25.  
  26. [*] Modified Files: []
  27.  
  28. [*] Deleted Files: []
  29.  
  30. [*] Modified Registry Keys: []
  31.  
  32. [*] Deleted Registry Keys: []
  33.  
  34. [*] DNS Communications: []
  35.  
  36. [*] Domains: []
  37.  
  38. [*] Network Communication - ICMP: []
  39.  
  40. [*] Network Communication - HTTP: []
  41.  
  42. [*] Network Communication - SMTP: []
  43.  
  44. [*] Network Communication - Hosts: []
  45.  
  46. [*] Network Communication - IRC: []
  47.  
  48. [*] Static Analysis: {
  49. "pe": {
  50. "peid_signatures": null,
  51. "imports": [
  52. {
  53. "imports": [
  54. {
  55. "name": null,
  56. "address": "0x401000"
  57. },
  58. {
  59. "name": null,
  60. "address": "0x401004"
  61. },
  62. {
  63. "name": null,
  64. "address": "0x401008"
  65. },
  66. {
  67. "name": "MethCallEngine",
  68. "address": "0x40100c"
  69. },
  70. {
  71. "name": null,
  72. "address": "0x401010"
  73. },
  74. {
  75. "name": null,
  76. "address": "0x401014"
  77. },
  78. {
  79. "name": null,
  80. "address": "0x401018"
  81. },
  82. {
  83. "name": null,
  84. "address": "0x40101c"
  85. },
  86. {
  87. "name": null,
  88. "address": "0x401020"
  89. },
  90. {
  91. "name": null,
  92. "address": "0x401024"
  93. },
  94. {
  95. "name": null,
  96. "address": "0x401028"
  97. },
  98. {
  99. "name": null,
  100. "address": "0x40102c"
  101. },
  102. {
  103. "name": null,
  104. "address": "0x401030"
  105. },
  106. {
  107. "name": null,
  108. "address": "0x401034"
  109. },
  110. {
  111. "name": "EVENT_SINK_AddRef",
  112. "address": "0x401038"
  113. },
  114. {
  115. "name": null,
  116. "address": "0x40103c"
  117. },
  118. {
  119. "name": "EVENT_SINK_Release",
  120. "address": "0x401040"
  121. },
  122. {
  123. "name": "EVENT_SINK_QueryInterface",
  124. "address": "0x401044"
  125. },
  126. {
  127. "name": "__vbaExceptHandler",
  128. "address": "0x401048"
  129. },
  130. {
  131. "name": null,
  132. "address": "0x40104c"
  133. },
  134. {
  135. "name": null,
  136. "address": "0x401050"
  137. },
  138. {
  139. "name": null,
  140. "address": "0x401054"
  141. },
  142. {
  143. "name": null,
  144. "address": "0x401058"
  145. },
  146. {
  147. "name": null,
  148. "address": "0x40105c"
  149. },
  150. {
  151. "name": null,
  152. "address": "0x401060"
  153. },
  154. {
  155. "name": null,
  156. "address": "0x401064"
  157. },
  158. {
  159. "name": null,
  160. "address": "0x401068"
  161. },
  162. {
  163. "name": null,
  164. "address": "0x40106c"
  165. },
  166. {
  167. "name": null,
  168. "address": "0x401070"
  169. },
  170. {
  171. "name": null,
  172. "address": "0x401074"
  173. },
  174. {
  175. "name": null,
  176. "address": "0x401078"
  177. },
  178. {
  179. "name": null,
  180. "address": "0x40107c"
  181. }
  182. ],
  183. "dll": "MSVBVM60.DLL"
  184. }
  185. ],
  186. "digital_signers": null,
  187. "exported_dll_name": null,
  188. "actual_checksum": "0x00085a93",
  189. "overlay": null,
  190. "imagebase": "0x00400000",
  191. "reported_checksum": "0x00085a93",
  192. "icon_hash": null,
  193. "entrypoint": "0x00401150",
  194. "timestamp": "2003-08-11 09:48:47",
  195. "osversion": "4.0",
  196. "sections": [
  197. {
  198. "name": ".text",
  199. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  200. "virtual_address": "0x00001000",
  201. "size_of_data": "0x00078000",
  202. "entropy": "5.66",
  203. "raw_address": "0x00001000",
  204. "virtual_size": "0x00077fac",
  205. "characteristics_raw": "0x60000020"
  206. },
  207. {
  208. "name": ".data",
  209. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  210. "virtual_address": "0x00079000",
  211. "size_of_data": "0x00000000",
  212. "entropy": "0.00",
  213. "raw_address": "0x00000000",
  214. "virtual_size": "0x000071e0",
  215. "characteristics_raw": "0xc0000040"
  216. },
  217. {
  218. "name": ".rsrc",
  219. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  220. "virtual_address": "0x00081000",
  221. "size_of_data": "0x00003000",
  222. "entropy": "4.11",
  223. "raw_address": "0x00079000",
  224. "virtual_size": "0x00002c8a",
  225. "characteristics_raw": "0x40000040"
  226. }
  227. ],
  228. "resources": [],
  229. "dirents": [
  230. {
  231. "virtual_address": "0x00000000",
  232. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  233. "size": "0x00000000"
  234. },
  235. {
  236. "virtual_address": "0x00078e84",
  237. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  238. "size": "0x00000028"
  239. },
  240. {
  241. "virtual_address": "0x00081000",
  242. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  243. "size": "0x00002c8a"
  244. },
  245. {
  246. "virtual_address": "0x00000000",
  247. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  248. "size": "0x00000000"
  249. },
  250. {
  251. "virtual_address": "0x00000000",
  252. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  253. "size": "0x00000000"
  254. },
  255. {
  256. "virtual_address": "0x00000000",
  257. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  258. "size": "0x00000000"
  259. },
  260. {
  261. "virtual_address": "0x00000000",
  262. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  263. "size": "0x00000000"
  264. },
  265. {
  266. "virtual_address": "0x00000000",
  267. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  268. "size": "0x00000000"
  269. },
  270. {
  271. "virtual_address": "0x00000000",
  272. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  273. "size": "0x00000000"
  274. },
  275. {
  276. "virtual_address": "0x00000000",
  277. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  278. "size": "0x00000000"
  279. },
  280. {
  281. "virtual_address": "0x00000000",
  282. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  283. "size": "0x00000000"
  284. },
  285. {
  286. "virtual_address": "0x00000220",
  287. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  288. "size": "0x00000020"
  289. },
  290. {
  291. "virtual_address": "0x00001000",
  292. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  293. "size": "0x00000084"
  294. },
  295. {
  296. "virtual_address": "0x00000000",
  297. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  298. "size": "0x00000000"
  299. },
  300. {
  301. "virtual_address": "0x00000000",
  302. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  303. "size": "0x00000000"
  304. },
  305. {
  306. "virtual_address": "0x00000000",
  307. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  308. "size": "0x00000000"
  309. }
  310. ],
  311. "exports": [],
  312. "guest_signers": {},
  313. "imphash": "8ed7143961d5479d758ff1e797d35dc0",
  314. "icon_fuzzy": null,
  315. "icon": null,
  316. "pdbpath": null,
  317. "imported_dll_count": 1,
  318. "versioninfo": []
  319. }
  320. }
  321.  
  322. [*] Resolved APIs: []
  323.  
  324. [*] Static Analysis: {
  325. "pe": {
  326. "peid_signatures": null,
  327. "imports": [
  328. {
  329. "imports": [
  330. {
  331. "name": null,
  332. "address": "0x401000"
  333. },
  334. {
  335. "name": null,
  336. "address": "0x401004"
  337. },
  338. {
  339. "name": null,
  340. "address": "0x401008"
  341. },
  342. {
  343. "name": "MethCallEngine",
  344. "address": "0x40100c"
  345. },
  346. {
  347. "name": null,
  348. "address": "0x401010"
  349. },
  350. {
  351. "name": null,
  352. "address": "0x401014"
  353. },
  354. {
  355. "name": null,
  356. "address": "0x401018"
  357. },
  358. {
  359. "name": null,
  360. "address": "0x40101c"
  361. },
  362. {
  363. "name": null,
  364. "address": "0x401020"
  365. },
  366. {
  367. "name": null,
  368. "address": "0x401024"
  369. },
  370. {
  371. "name": null,
  372. "address": "0x401028"
  373. },
  374. {
  375. "name": null,
  376. "address": "0x40102c"
  377. },
  378. {
  379. "name": null,
  380. "address": "0x401030"
  381. },
  382. {
  383. "name": null,
  384. "address": "0x401034"
  385. },
  386. {
  387. "name": "EVENT_SINK_AddRef",
  388. "address": "0x401038"
  389. },
  390. {
  391. "name": null,
  392. "address": "0x40103c"
  393. },
  394. {
  395. "name": "EVENT_SINK_Release",
  396. "address": "0x401040"
  397. },
  398. {
  399. "name": "EVENT_SINK_QueryInterface",
  400. "address": "0x401044"
  401. },
  402. {
  403. "name": "__vbaExceptHandler",
  404. "address": "0x401048"
  405. },
  406. {
  407. "name": null,
  408. "address": "0x40104c"
  409. },
  410. {
  411. "name": null,
  412. "address": "0x401050"
  413. },
  414. {
  415. "name": null,
  416. "address": "0x401054"
  417. },
  418. {
  419. "name": null,
  420. "address": "0x401058"
  421. },
  422. {
  423. "name": null,
  424. "address": "0x40105c"
  425. },
  426. {
  427. "name": null,
  428. "address": "0x401060"
  429. },
  430. {
  431. "name": null,
  432. "address": "0x401064"
  433. },
  434. {
  435. "name": null,
  436. "address": "0x401068"
  437. },
  438. {
  439. "name": null,
  440. "address": "0x40106c"
  441. },
  442. {
  443. "name": null,
  444. "address": "0x401070"
  445. },
  446. {
  447. "name": null,
  448. "address": "0x401074"
  449. },
  450. {
  451. "name": null,
  452. "address": "0x401078"
  453. },
  454. {
  455. "name": null,
  456. "address": "0x40107c"
  457. }
  458. ],
  459. "dll": "MSVBVM60.DLL"
  460. }
  461. ],
  462. "digital_signers": null,
  463. "exported_dll_name": null,
  464. "actual_checksum": "0x00085a93",
  465. "overlay": null,
  466. "imagebase": "0x00400000",
  467. "reported_checksum": "0x00085a93",
  468. "icon_hash": null,
  469. "entrypoint": "0x00401150",
  470. "timestamp": "2003-08-11 09:48:47",
  471. "osversion": "4.0",
  472. "sections": [
  473. {
  474. "name": ".text",
  475. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  476. "virtual_address": "0x00001000",
  477. "size_of_data": "0x00078000",
  478. "entropy": "5.66",
  479. "raw_address": "0x00001000",
  480. "virtual_size": "0x00077fac",
  481. "characteristics_raw": "0x60000020"
  482. },
  483. {
  484. "name": ".data",
  485. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  486. "virtual_address": "0x00079000",
  487. "size_of_data": "0x00000000",
  488. "entropy": "0.00",
  489. "raw_address": "0x00000000",
  490. "virtual_size": "0x000071e0",
  491. "characteristics_raw": "0xc0000040"
  492. },
  493. {
  494. "name": ".rsrc",
  495. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  496. "virtual_address": "0x00081000",
  497. "size_of_data": "0x00003000",
  498. "entropy": "4.11",
  499. "raw_address": "0x00079000",
  500. "virtual_size": "0x00002c8a",
  501. "characteristics_raw": "0x40000040"
  502. }
  503. ],
  504. "resources": [],
  505. "dirents": [
  506. {
  507. "virtual_address": "0x00000000",
  508. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  509. "size": "0x00000000"
  510. },
  511. {
  512. "virtual_address": "0x00078e84",
  513. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  514. "size": "0x00000028"
  515. },
  516. {
  517. "virtual_address": "0x00081000",
  518. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  519. "size": "0x00002c8a"
  520. },
  521. {
  522. "virtual_address": "0x00000000",
  523. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  524. "size": "0x00000000"
  525. },
  526. {
  527. "virtual_address": "0x00000000",
  528. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  529. "size": "0x00000000"
  530. },
  531. {
  532. "virtual_address": "0x00000000",
  533. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  534. "size": "0x00000000"
  535. },
  536. {
  537. "virtual_address": "0x00000000",
  538. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  539. "size": "0x00000000"
  540. },
  541. {
  542. "virtual_address": "0x00000000",
  543. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  544. "size": "0x00000000"
  545. },
  546. {
  547. "virtual_address": "0x00000000",
  548. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  549. "size": "0x00000000"
  550. },
  551. {
  552. "virtual_address": "0x00000000",
  553. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  554. "size": "0x00000000"
  555. },
  556. {
  557. "virtual_address": "0x00000000",
  558. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  559. "size": "0x00000000"
  560. },
  561. {
  562. "virtual_address": "0x00000220",
  563. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  564. "size": "0x00000020"
  565. },
  566. {
  567. "virtual_address": "0x00001000",
  568. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  569. "size": "0x00000084"
  570. },
  571. {
  572. "virtual_address": "0x00000000",
  573. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  574. "size": "0x00000000"
  575. },
  576. {
  577. "virtual_address": "0x00000000",
  578. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  579. "size": "0x00000000"
  580. },
  581. {
  582. "virtual_address": "0x00000000",
  583. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  584. "size": "0x00000000"
  585. }
  586. ],
  587. "exports": [],
  588. "guest_signers": {},
  589. "imphash": "8ed7143961d5479d758ff1e797d35dc0",
  590. "icon_fuzzy": null,
  591. "icon": null,
  592. "pdbpath": null,
  593. "imported_dll_count": 1,
  594. "versioninfo": []
  595. }
  596. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!