API tools faq
paste
paladin316

Exes_93d3714ce8ad0bda54496a2964ffd502_exe_2019-06-24_07_30.json

paladin316
Jun 24th, 2019
2,306
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.75 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_93d3714ce8ad0bda54496a2964ffd502.exe"
  7. [*] File Size: 5432832
  8. [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed"
  9. [*] SHA256: "87fc29a9437e793103850785024eb86e69f6108f77069fc8548217b90d7e962f"
  10. [*] MD5: "93d3714ce8ad0bda54496a2964ffd502"
  11. [*] SHA1: "b9dca3abc663e9154fb8c02b0b48831b649950f9"
  12. [*] SHA512: "a60791709c11977b863de9763369fb805f6a5cc5fe3e15bda094f1420f51cdf9e6b08e3b3a399416d4557452c1f3d2ca24f834f0c71c46ad8cd88c76422a0ab8"
  13. [*] CRC32: "29DED005"
  14. [*] SSDEEP: "98304:dMraL+6wEP1VbQpI9EqJfgwKaDo/u9NJE5MUFk/8Ca3P3tOu56+eqcpxVCNaGBNY:dca9hdKp++/u9NqM/8Ca3P35c+eqm5Gk"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: UPX1, entropy: 7.82, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x0052de00, virtual_size: 0x0052e000"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "The executable is compressed using UPX",
  29. "Details": [
  30. {
  31. "section": "name: UPX0, entropy: 0.00, characteristics: IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE, raw_size: 0x00000000, virtual_size: 0x00178000"
  32. }
  33. ]
  34. },
  35. {
  36. "Description": "File has been identified by 43 Antiviruses on VirusTotal as malicious",
  37. "Details": [
  38. {
  39. "MicroWorld-eScan": "Generic.Backdoor.Torr.16640735"
  40. },
  41. {
  42. "CAT-QuickHeal": "Trojanpws.Qqpass.16543"
  43. },
  44. {
  45. "Cylance": "Unsafe"
  46. },
  47. {
  48. "AegisLab": "Trojan.Multi.Generic.lpKS"
  49. },
  50. {
  51. "Arcabit": "Generic.Backdoor.Torr.DFDEADF"
  52. },
  53. {
  54. "Invincea": "heuristic"
  55. },
  56. {
  57. "F-Prot": "W32/Trojan.CLL.gen!Eldorado"
  58. },
  59. {
  60. "Symantec": "Hacktool.Mimikatz"
  61. },
  62. {
  63. "ESET-NOD32": "a variant of Win32/CoinMiner.BUJ"
  64. },
  65. {
  66. "APEX": "Malicious"
  67. },
  68. {
  69. "Avast": "Win32:Malware-gen"
  70. },
  71. {
  72. "ClamAV": "Win.Exploit.EQGRP-6322722-0"
  73. },
  74. {
  75. "Kaspersky": "HEUR:Exploit.Win32.MS17-010.gen"
  76. },
  77. {
  78. "BitDefender": "Generic.Backdoor.Torr.16640735"
  79. },
  80. {
  81. "Endgame": "malicious (moderate confidence)"
  82. },
  83. {
  84. "Emsisoft": "Generic.Backdoor.Torr.16640735 (B)"
  85. },
  86. {
  87. "Comodo": "Packed.Win32.MUPX.Gen@24tbus"
  88. },
  89. {
  90. "F-Secure": "Heuristic.HEUR/AGEN.1014767"
  91. },
  92. {
  93. "DrWeb": "Trojan.Equation.77"
  94. },
  95. {
  96. "McAfee-GW-Edition": "BehavesLike.Win32.Trojan.tc"
  97. },
  98. {
  99. "Trapmine": "malicious.high.ml.score"
  100. },
  101. {
  102. "FireEye": "Generic.mg.93d3714ce8ad0bda"
  103. },
  104. {
  105. "Sophos": "Mal/Behav-004"
  106. },
  107. {
  108. "Ikarus": "Trojan-PSW.QQpass"
  109. },
  110. {
  111. "Cyren": "W32/Trojan.CLL.gen!Eldorado"
  112. },
  113. {
  114. "eGambit": "hacktool.mimikatz"
  115. },
  116. {
  117. "Avira": "HEUR/AGEN.1014767"
  118. },
  119. {
  120. "MAX": "malware (ai score=82)"
  121. },
  122. {
  123. "Antiy-AVL": "GrayWare/Win32.FlyStudio.a"
  124. },
  125. {
  126. "Microsoft": "Trojan:Win32/Wacatac.B!ml"
  127. },
  128. {
  129. "ZoneAlarm": "HEUR:Exploit.Win32.MS17-010.gen"
  130. },
  131. {
  132. "GData": "Win32.Trojan.FlyStudio.F"
  133. },
  134. {
  135. "AhnLab-V3": "Malware/Win32.Generic.C3246619"
  136. },
  137. {
  138. "Acronis": "suspicious"
  139. },
  140. {
  141. "VBA32": "BScope.Adware.Wajam"
  142. },
  143. {
  144. "ALYac": "Generic.Backdoor.Torr.16640735"
  145. },
  146. {
  147. "Ad-Aware": "Generic.Backdoor.Torr.16640735"
  148. },
  149. {
  150. "Rising": "Exploit.MS17-010!8.E85D/N3#98% (RDM+:cmRtazoziPe04xIr5JWTXXZFyUGG)"
  151. },
  152. {
  153. "SentinelOne": "DFI - Malicious PE"
  154. },
  155. {
  156. "Fortinet": "W32/CoinMiner.BUJ!tr"
  157. },
  158. {
  159. "AVG": "Win32:Malware-gen"
  160. },
  161. {
  162. "CrowdStrike": "win/malicious_confidence_100% (D)"
  163. },
  164. {
  165. "Qihoo-360": "Win32/Trojan.Exploit.46b"
  166. }
  167. ]
  168. }
  169. ]
  170.  
  171. [*] Started Service: []
  172.  
  173. [*] Executed Commands: []
  174.  
  175. [*] Mutexes: []
  176.  
  177. [*] Modified Files: []
  178.  
  179. [*] Deleted Files: []
  180.  
  181. [*] Modified Registry Keys: []
  182.  
  183. [*] Deleted Registry Keys: []
  184.  
  185. [*] DNS Communications: []
  186.  
  187. [*] Domains: []
  188.  
  189. [*] Network Communication - ICMP: []
  190.  
  191. [*] Network Communication - HTTP: []
  192.  
  193. [*] Network Communication - SMTP: []
  194.  
  195. [*] Network Communication - Hosts: []
  196.  
  197. [*] Network Communication - IRC: []
  198.  
  199. [*] Static Analysis: {
  200. "pe": {
  201. "peid_signatures": null,
  202. "imports": [
  203. {
  204. "imports": [
  205. {
  206. "name": "RegCloseKey",
  207. "address": "0xaa7154"
  208. }
  209. ],
  210. "dll": "ADVAPI32.dll"
  211. },
  212. {
  213. "imports": [
  214. {
  215. "name": null,
  216. "address": "0xaa715c"
  217. }
  218. ],
  219. "dll": "COMCTL32.dll"
  220. },
  221. {
  222. "imports": [
  223. {
  224. "name": "ChooseColorA",
  225. "address": "0xaa7164"
  226. }
  227. ],
  228. "dll": "comdlg32.dll"
  229. },
  230. {
  231. "imports": [
  232. {
  233. "name": "Escape",
  234. "address": "0xaa716c"
  235. }
  236. ],
  237. "dll": "GDI32.dll"
  238. },
  239. {
  240. "imports": [
  241. {
  242. "name": "GetAdaptersInfo",
  243. "address": "0xaa7174"
  244. }
  245. ],
  246. "dll": "iphlpapi.dll"
  247. },
  248. {
  249. "imports": [
  250. {
  251. "name": "LoadLibraryA",
  252. "address": "0xaa717c"
  253. },
  254. {
  255. "name": "ExitProcess",
  256. "address": "0xaa7180"
  257. },
  258. {
  259. "name": "GetProcAddress",
  260. "address": "0xaa7184"
  261. },
  262. {
  263. "name": "VirtualProtect",
  264. "address": "0xaa7188"
  265. }
  266. ],
  267. "dll": "KERNEL32.DLL"
  268. },
  269. {
  270. "imports": [
  271. {
  272. "name": "OleRun",
  273. "address": "0xaa7190"
  274. }
  275. ],
  276. "dll": "ole32.dll"
  277. },
  278. {
  279. "imports": [
  280. {
  281. "name": "VariantCopy",
  282. "address": "0xaa7198"
  283. }
  284. ],
  285. "dll": "OLEAUT32.dll"
  286. },
  287. {
  288. "imports": [
  289. {
  290. "name": "RasHangUpA",
  291. "address": "0xaa71a0"
  292. }
  293. ],
  294. "dll": "RASAPI32.dll"
  295. },
  296. {
  297. "imports": [
  298. {
  299. "name": "ShellExecuteA",
  300. "address": "0xaa71a8"
  301. }
  302. ],
  303. "dll": "SHELL32.dll"
  304. },
  305. {
  306. "imports": [
  307. {
  308. "name": "GetDC",
  309. "address": "0xaa71b0"
  310. }
  311. ],
  312. "dll": "USER32.dll"
  313. },
  314. {
  315. "imports": [
  316. {
  317. "name": "VerQueryValueA",
  318. "address": "0xaa71b8"
  319. }
  320. ],
  321. "dll": "VERSION.dll"
  322. },
  323. {
  324. "imports": [
  325. {
  326. "name": "InternetOpenA",
  327. "address": "0xaa71c0"
  328. }
  329. ],
  330. "dll": "WININET.dll"
  331. },
  332. {
  333. "imports": [
  334. {
  335. "name": "waveOutOpen",
  336. "address": "0xaa71c8"
  337. }
  338. ],
  339. "dll": "WINMM.dll"
  340. },
  341. {
  342. "imports": [
  343. {
  344. "name": "OpenPrinterA",
  345. "address": "0xaa71d0"
  346. }
  347. ],
  348. "dll": "WINSPOOL.DRV"
  349. },
  350. {
  351. "imports": [
  352. {
  353. "name": "recvfrom",
  354. "address": "0xaa71d8"
  355. }
  356. ],
  357. "dll": "WS2_32.dll"
  358. }
  359. ],
  360. "digital_signers": null,
  361. "exported_dll_name": null,
  362. "actual_checksum": "0x0053be21",
  363. "overlay": null,
  364. "imagebase": "0x00400000",
  365. "reported_checksum": "0x00000000",
  366. "icon_hash": null,
  367. "entrypoint": "0x00aa6ab0",
  368. "timestamp": "2019-06-23 20:11:50",
  369. "osversion": "4.0",
  370. "sections": [
  371. {
  372. "name": "UPX0",
  373. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  374. "virtual_address": "0x00001000",
  375. "size_of_data": "0x00000000",
  376. "entropy": "0.00",
  377. "raw_address": "0x00000400",
  378. "virtual_size": "0x00178000",
  379. "characteristics_raw": "0xe0000080"
  380. },
  381. {
  382. "name": "UPX1",
  383. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  384. "virtual_address": "0x00179000",
  385. "size_of_data": "0x0052de00",
  386. "entropy": "7.82",
  387. "raw_address": "0x00000400",
  388. "virtual_size": "0x0052e000",
  389. "characteristics_raw": "0xe0000040"
  390. },
  391. {
  392. "name": "UPX2",
  393. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  394. "virtual_address": "0x006a7000",
  395. "size_of_data": "0x00000400",
  396. "entropy": "3.68",
  397. "raw_address": "0x0052e200",
  398. "virtual_size": "0x00001000",
  399. "characteristics_raw": "0xc0000040"
  400. }
  401. ],
  402. "resources": [],
  403. "dirents": [
  404. {
  405. "virtual_address": "0x00000000",
  406. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  407. "size": "0x00000000"
  408. },
  409. {
  410. "virtual_address": "0x006a7000",
  411. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  412. "size": "0x0000037c"
  413. },
  414. {
  415. "virtual_address": "0x00000000",
  416. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  417. "size": "0x00000000"
  418. },
  419. {
  420. "virtual_address": "0x00000000",
  421. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  422. "size": "0x00000000"
  423. },
  424. {
  425. "virtual_address": "0x00000000",
  426. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  427. "size": "0x00000000"
  428. },
  429. {
  430. "virtual_address": "0x00000000",
  431. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  432. "size": "0x00000000"
  433. },
  434. {
  435. "virtual_address": "0x00000000",
  436. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  437. "size": "0x00000000"
  438. },
  439. {
  440. "virtual_address": "0x00000000",
  441. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  442. "size": "0x00000000"
  443. },
  444. {
  445. "virtual_address": "0x00000000",
  446. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  447. "size": "0x00000000"
  448. },
  449. {
  450. "virtual_address": "0x00000000",
  451. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  452. "size": "0x00000000"
  453. },
  454. {
  455. "virtual_address": "0x00000000",
  456. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  457. "size": "0x00000000"
  458. },
  459. {
  460. "virtual_address": "0x00000000",
  461. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  462. "size": "0x00000000"
  463. },
  464. {
  465. "virtual_address": "0x00000000",
  466. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  467. "size": "0x00000000"
  468. },
  469. {
  470. "virtual_address": "0x00000000",
  471. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  472. "size": "0x00000000"
  473. },
  474. {
  475. "virtual_address": "0x00000000",
  476. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  477. "size": "0x00000000"
  478. },
  479. {
  480. "virtual_address": "0x00000000",
  481. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  482. "size": "0x00000000"
  483. }
  484. ],
  485. "exports": [],
  486. "guest_signers": {},
  487. "imphash": "7e8fd41cc4af90fd0b2731fbcc919e1a",
  488. "icon_fuzzy": null,
  489. "icon": null,
  490. "pdbpath": null,
  491. "imported_dll_count": 16,
  492. "versioninfo": []
  493. }
  494. }
  495.  
  496. [*] Resolved APIs: []
  497.  
  498. [*] Static Analysis: {
  499. "pe": {
  500. "peid_signatures": null,
  501. "imports": [
  502. {
  503. "imports": [
  504. {
  505. "name": "RegCloseKey",
  506. "address": "0xaa7154"
  507. }
  508. ],
  509. "dll": "ADVAPI32.dll"
  510. },
  511. {
  512. "imports": [
  513. {
  514. "name": null,
  515. "address": "0xaa715c"
  516. }
  517. ],
  518. "dll": "COMCTL32.dll"
  519. },
  520. {
  521. "imports": [
  522. {
  523. "name": "ChooseColorA",
  524. "address": "0xaa7164"
  525. }
  526. ],
  527. "dll": "comdlg32.dll"
  528. },
  529. {
  530. "imports": [
  531. {
  532. "name": "Escape",
  533. "address": "0xaa716c"
  534. }
  535. ],
  536. "dll": "GDI32.dll"
  537. },
  538. {
  539. "imports": [
  540. {
  541. "name": "GetAdaptersInfo",
  542. "address": "0xaa7174"
  543. }
  544. ],
  545. "dll": "iphlpapi.dll"
  546. },
  547. {
  548. "imports": [
  549. {
  550. "name": "LoadLibraryA",
  551. "address": "0xaa717c"
  552. },
  553. {
  554. "name": "ExitProcess",
  555. "address": "0xaa7180"
  556. },
  557. {
  558. "name": "GetProcAddress",
  559. "address": "0xaa7184"
  560. },
  561. {
  562. "name": "VirtualProtect",
  563. "address": "0xaa7188"
  564. }
  565. ],
  566. "dll": "KERNEL32.DLL"
  567. },
  568. {
  569. "imports": [
  570. {
  571. "name": "OleRun",
  572. "address": "0xaa7190"
  573. }
  574. ],
  575. "dll": "ole32.dll"
  576. },
  577. {
  578. "imports": [
  579. {
  580. "name": "VariantCopy",
  581. "address": "0xaa7198"
  582. }
  583. ],
  584. "dll": "OLEAUT32.dll"
  585. },
  586. {
  587. "imports": [
  588. {
  589. "name": "RasHangUpA",
  590. "address": "0xaa71a0"
  591. }
  592. ],
  593. "dll": "RASAPI32.dll"
  594. },
  595. {
  596. "imports": [
  597. {
  598. "name": "ShellExecuteA",
  599. "address": "0xaa71a8"
  600. }
  601. ],
  602. "dll": "SHELL32.dll"
  603. },
  604. {
  605. "imports": [
  606. {
  607. "name": "GetDC",
  608. "address": "0xaa71b0"
  609. }
  610. ],
  611. "dll": "USER32.dll"
  612. },
  613. {
  614. "imports": [
  615. {
  616. "name": "VerQueryValueA",
  617. "address": "0xaa71b8"
  618. }
  619. ],
  620. "dll": "VERSION.dll"
  621. },
  622. {
  623. "imports": [
  624. {
  625. "name": "InternetOpenA",
  626. "address": "0xaa71c0"
  627. }
  628. ],
  629. "dll": "WININET.dll"
  630. },
  631. {
  632. "imports": [
  633. {
  634. "name": "waveOutOpen",
  635. "address": "0xaa71c8"
  636. }
  637. ],
  638. "dll": "WINMM.dll"
  639. },
  640. {
  641. "imports": [
  642. {
  643. "name": "OpenPrinterA",
  644. "address": "0xaa71d0"
  645. }
  646. ],
  647. "dll": "WINSPOOL.DRV"
  648. },
  649. {
  650. "imports": [
  651. {
  652. "name": "recvfrom",
  653. "address": "0xaa71d8"
  654. }
  655. ],
  656. "dll": "WS2_32.dll"
  657. }
  658. ],
  659. "digital_signers": null,
  660. "exported_dll_name": null,
  661. "actual_checksum": "0x0053be21",
  662. "overlay": null,
  663. "imagebase": "0x00400000",
  664. "reported_checksum": "0x00000000",
  665. "icon_hash": null,
  666. "entrypoint": "0x00aa6ab0",
  667. "timestamp": "2019-06-23 20:11:50",
  668. "osversion": "4.0",
  669. "sections": [
  670. {
  671. "name": "UPX0",
  672. "characteristics": "IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  673. "virtual_address": "0x00001000",
  674. "size_of_data": "0x00000000",
  675. "entropy": "0.00",
  676. "raw_address": "0x00000400",
  677. "virtual_size": "0x00178000",
  678. "characteristics_raw": "0xe0000080"
  679. },
  680. {
  681. "name": "UPX1",
  682. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  683. "virtual_address": "0x00179000",
  684. "size_of_data": "0x0052de00",
  685. "entropy": "7.82",
  686. "raw_address": "0x00000400",
  687. "virtual_size": "0x0052e000",
  688. "characteristics_raw": "0xe0000040"
  689. },
  690. {
  691. "name": "UPX2",
  692. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
  693. "virtual_address": "0x006a7000",
  694. "size_of_data": "0x00000400",
  695. "entropy": "3.68",
  696. "raw_address": "0x0052e200",
  697. "virtual_size": "0x00001000",
  698. "characteristics_raw": "0xc0000040"
  699. }
  700. ],
  701. "resources": [],
  702. "dirents": [
  703. {
  704. "virtual_address": "0x00000000",
  705. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  706. "size": "0x00000000"
  707. },
  708. {
  709. "virtual_address": "0x006a7000",
  710. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  711. "size": "0x0000037c"
  712. },
  713. {
  714. "virtual_address": "0x00000000",
  715. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  716. "size": "0x00000000"
  717. },
  718. {
  719. "virtual_address": "0x00000000",
  720. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  721. "size": "0x00000000"
  722. },
  723. {
  724. "virtual_address": "0x00000000",
  725. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  726. "size": "0x00000000"
  727. },
  728. {
  729. "virtual_address": "0x00000000",
  730. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  731. "size": "0x00000000"
  732. },
  733. {
  734. "virtual_address": "0x00000000",
  735. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  736. "size": "0x00000000"
  737. },
  738. {
  739. "virtual_address": "0x00000000",
  740. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  741. "size": "0x00000000"
  742. },
  743. {
  744. "virtual_address": "0x00000000",
  745. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  746. "size": "0x00000000"
  747. },
  748. {
  749. "virtual_address": "0x00000000",
  750. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  751. "size": "0x00000000"
  752. },
  753. {
  754. "virtual_address": "0x00000000",
  755. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  756. "size": "0x00000000"
  757. },
  758. {
  759. "virtual_address": "0x00000000",
  760. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  761. "size": "0x00000000"
  762. },
  763. {
  764. "virtual_address": "0x00000000",
  765. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  766. "size": "0x00000000"
  767. },
  768. {
  769. "virtual_address": "0x00000000",
  770. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  771. "size": "0x00000000"
  772. },
  773. {
  774. "virtual_address": "0x00000000",
  775. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  776. "size": "0x00000000"
  777. },
  778. {
  779. "virtual_address": "0x00000000",
  780. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  781. "size": "0x00000000"
  782. }
  783. ],
  784. "exports": [],
  785. "guest_signers": {},
  786. "imphash": "7e8fd41cc4af90fd0b2731fbcc919e1a",
  787. "icon_fuzzy": null,
  788. "icon": null,
  789. "pdbpath": null,
  790. "imported_dll_count": 16,
  791. "versioninfo": []
  792. }
  793. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!