API tools faq
paste
paladin316

Exes_98119cf7e92697a623d6d186ddca94d9_exe_2019-07-02_00_30.json

paladin316
Jul 1st, 2019
2,159
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.29 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: "Malicious"
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Exes_98119cf7e92697a623d6d186ddca94d9.exe"
  7. [*] File Size: 1035776
  8. [*] File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. [*] SHA256: "7cfd8176a561d17895afb532af1b04ebcba28aed056ce03a46a22bb069954c3b"
  10. [*] MD5: "98119cf7e92697a623d6d186ddca94d9"
  11. [*] SHA1: "4190ebf1ba1ae0941b8b52c5968e6206ec0570cb"
  12. [*] SHA512: "c5675f6ae548148785b7b34498952f49bcebd82e966e47ff2f3bc0785534ff6a17f54750a53040777755d16962f3cbd5a1269f203682ac720e89fac4e1c9eeab"
  13. [*] CRC32: "6127F08A"
  14. [*] SSDEEP: "24576:5I5EeLaVSsJDRl5oxvH5LN4zqa96+9AjZ2zqJ5:57n5R3ox1ylGjE"
  15.  
  16. [*] Process Execution: []
  17.  
  18. [*] Signatures Detected: [
  19. {
  20. "Description": "The binary likely contains encrypted or compressed data.",
  21. "Details": [
  22. {
  23. "section": "name: .rsrc, entropy: 7.93, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ, raw_size: 0x000e7800, virtual_size: 0x000e7658"
  24. }
  25. ]
  26. },
  27. {
  28. "Description": "Anomalous .NET characteristics",
  29. "Details": [
  30. {
  31. "anomalous_version": "Assembly version is set to 0"
  32. }
  33. ]
  34. },
  35. {
  36. "Description": "File has been identified by 18 Antiviruses on VirusTotal as malicious",
  37. "Details": [
  38. {
  39. "McAfee": "GenericRXHU-ZV!98119CF7E926"
  40. },
  41. {
  42. "Symantec": "ML.Attribute.HighConfidence"
  43. },
  44. {
  45. "APEX": "Malicious"
  46. },
  47. {
  48. "Avast": "Win32:RATX-gen [Trj]"
  49. },
  50. {
  51. "Endgame": "malicious (high confidence)"
  52. },
  53. {
  54. "Invincea": "heuristic"
  55. },
  56. {
  57. "McAfee-GW-Edition": "BehavesLike.Win32.PUPXBZ.fc"
  58. },
  59. {
  60. "Trapmine": "suspicious.low.ml.score"
  61. },
  62. {
  63. "FireEye": "Generic.mg.98119cf7e92697a6"
  64. },
  65. {
  66. "Microsoft": "Trojan:Win32/Fuerboos.C!cl"
  67. },
  68. {
  69. "Acronis": "suspicious"
  70. },
  71. {
  72. "ESET-NOD32": "a variant of MSIL/Kryptik.RYY"
  73. },
  74. {
  75. "Rising": "Trojan.MSIL/Kryptik!1.B1DC (CLASSIC)"
  76. },
  77. {
  78. "Fortinet": "MSIL/Kryptik.RQA!tr"
  79. },
  80. {
  81. "AVG": "Win32:RATX-gen [Trj]"
  82. },
  83. {
  84. "Cybereason": "malicious.1ba1ae"
  85. },
  86. {
  87. "CrowdStrike": "win/malicious_confidence_80% (D)"
  88. },
  89. {
  90. "Qihoo-360": "HEUR/QVM03.0.3D11.Malware.Gen"
  91. }
  92. ]
  93. }
  94. ]
  95.  
  96. [*] Started Service: []
  97.  
  98. [*] Executed Commands: []
  99.  
  100. [*] Mutexes: []
  101.  
  102. [*] Modified Files: []
  103.  
  104. [*] Deleted Files: []
  105.  
  106. [*] Modified Registry Keys: []
  107.  
  108. [*] Deleted Registry Keys: []
  109.  
  110. [*] DNS Communications: []
  111.  
  112. [*] Domains: []
  113.  
  114. [*] Network Communication - ICMP: []
  115.  
  116. [*] Network Communication - HTTP: []
  117.  
  118. [*] Network Communication - SMTP: []
  119.  
  120. [*] Network Communication - Hosts: []
  121.  
  122. [*] Network Communication - IRC: []
  123.  
  124. [*] Static Analysis: {
  125. "dotnet": {
  126. "customattrs": [],
  127. "assemblyinfo": {
  128. "version": "0.0.0.0",
  129. "name": "ZwxCaZzVZYcgFCjema"
  130. },
  131. "assemblyrefs": [
  132. {
  133. "version": "4.0.0.0",
  134. "name": "mscorlib"
  135. },
  136. {
  137. "version": "4.0.0.0",
  138. "name": "System"
  139. },
  140. {
  141. "version": "4.0.0.0",
  142. "name": "System.Web"
  143. },
  144. {
  145. "version": "2.6.10.0",
  146. "name": "System.Runtime"
  147. }
  148. ],
  149. "typerefs": [
  150. {
  151. "typename": "System.Net.Cookie",
  152. "assembly": "System"
  153. },
  154. {
  155. "typename": "System.Runtime.CompilerServices.CallerFilePathAttribute",
  156. "assembly": "System.Runtime"
  157. },
  158. {
  159. "typename": "System.Runtime.CompilerServices.CallerLineNumberAttribute",
  160. "assembly": "System.Runtime"
  161. },
  162. {
  163. "typename": "System.Runtime.CompilerServices.CallerMemberNameAttribute",
  164. "assembly": "System.Runtime"
  165. },
  166. {
  167. "typename": "System.Web.HttpServerUtility",
  168. "assembly": "System.Web"
  169. },
  170. {
  171. "typename": "System.Activator",
  172. "assembly": "mscorlib"
  173. },
  174. {
  175. "typename": "System.ArgumentNullException",
  176. "assembly": "mscorlib"
  177. },
  178. {
  179. "typename": "System.Array",
  180. "assembly": "mscorlib"
  181. },
  182. {
  183. "typename": "System.AsyncCallback",
  184. "assembly": "mscorlib"
  185. },
  186. {
  187. "typename": "System.Char",
  188. "assembly": "mscorlib"
  189. },
  190. {
  191. "typename": "System.Collections.Generic.IDictionary`2",
  192. "assembly": "mscorlib"
  193. },
  194. {
  195. "typename": "System.Convert",
  196. "assembly": "mscorlib"
  197. },
  198. {
  199. "typename": "System.DateTime",
  200. "assembly": "mscorlib"
  201. },
  202. {
  203. "typename": "System.Diagnostics.DebuggableAttribute",
  204. "assembly": "mscorlib"
  205. },
  206. {
  207. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  208. "assembly": "mscorlib"
  209. },
  210. {
  211. "typename": "System.Enum",
  212. "assembly": "mscorlib"
  213. },
  214. {
  215. "typename": "System.Exception",
  216. "assembly": "mscorlib"
  217. },
  218. {
  219. "typename": "System.Func`1",
  220. "assembly": "mscorlib"
  221. },
  222. {
  223. "typename": "System.GC",
  224. "assembly": "mscorlib"
  225. },
  226. {
  227. "typename": "System.IAsyncResult",
  228. "assembly": "mscorlib"
  229. },
  230. {
  231. "typename": "System.IDisposable",
  232. "assembly": "mscorlib"
  233. },
  234. {
  235. "typename": "System.IFormatProvider",
  236. "assembly": "mscorlib"
  237. },
  238. {
  239. "typename": "System.IO.Stream",
  240. "assembly": "mscorlib"
  241. },
  242. {
  243. "typename": "System.IO.StreamReader",
  244. "assembly": "mscorlib"
  245. },
  246. {
  247. "typename": "System.IO.TextReader",
  248. "assembly": "mscorlib"
  249. },
  250. {
  251. "typename": "System.Lazy`1",
  252. "assembly": "mscorlib"
  253. },
  254. {
  255. "typename": "System.MulticastDelegate",
  256. "assembly": "mscorlib"
  257. },
  258. {
  259. "typename": "System.Object",
  260. "assembly": "mscorlib"
  261. },
  262. {
  263. "typename": "System.ParamArrayAttribute",
  264. "assembly": "mscorlib"
  265. },
  266. {
  267. "typename": "System.Reflection.Assembly",
  268. "assembly": "mscorlib"
  269. },
  270. {
  271. "typename": "System.Reflection.MethodBase",
  272. "assembly": "mscorlib"
  273. },
  274. {
  275. "typename": "System.Reflection.MethodInfo",
  276. "assembly": "mscorlib"
  277. },
  278. {
  279. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  280. "assembly": "mscorlib"
  281. },
  282. {
  283. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  284. "assembly": "mscorlib"
  285. },
  286. {
  287. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  288. "assembly": "mscorlib"
  289. },
  290. {
  291. "typename": "System.RuntimeTypeHandle",
  292. "assembly": "mscorlib"
  293. },
  294. {
  295. "typename": "System.String",
  296. "assembly": "mscorlib"
  297. },
  298. {
  299. "typename": "System.Text.StringBuilder",
  300. "assembly": "mscorlib"
  301. },
  302. {
  303. "typename": "System.Type",
  304. "assembly": "mscorlib"
  305. }
  306. ]
  307. },
  308. "pe": {
  309. "peid_signatures": null,
  310. "imports": [
  311. {
  312. "imports": [
  313. {
  314. "name": "_CorExeMain",
  315. "address": "0x402000"
  316. }
  317. ],
  318. "dll": "mscoree.dll"
  319. }
  320. ],
  321. "digital_signers": null,
  322. "exported_dll_name": null,
  323. "actual_checksum": "0x00102d32",
  324. "overlay": null,
  325. "imagebase": "0x00400000",
  326. "reported_checksum": "0x00102d32",
  327. "icon_hash": null,
  328. "entrypoint": "0x0041703e",
  329. "timestamp": "2019-05-24 05:02:23",
  330. "osversion": "4.0",
  331. "sections": [
  332. {
  333. "name": ".text",
  334. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  335. "virtual_address": "0x00002000",
  336. "size_of_data": "0x00015200",
  337. "entropy": "5.66",
  338. "raw_address": "0x00000200",
  339. "virtual_size": "0x00015044",
  340. "characteristics_raw": "0x60000020"
  341. },
  342. {
  343. "name": ".rsrc",
  344. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  345. "virtual_address": "0x00018000",
  346. "size_of_data": "0x000e7800",
  347. "entropy": "7.93",
  348. "raw_address": "0x00015400",
  349. "virtual_size": "0x000e7658",
  350. "characteristics_raw": "0x40000040"
  351. },
  352. {
  353. "name": ".reloc",
  354. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  355. "virtual_address": "0x00100000",
  356. "size_of_data": "0x00000200",
  357. "entropy": "0.10",
  358. "raw_address": "0x000fcc00",
  359. "virtual_size": "0x0000000c",
  360. "characteristics_raw": "0x42000040"
  361. }
  362. ],
  363. "resources": [],
  364. "dirents": [
  365. {
  366. "virtual_address": "0x00000000",
  367. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  368. "size": "0x00000000"
  369. },
  370. {
  371. "virtual_address": "0x00016fe8",
  372. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  373. "size": "0x00000053"
  374. },
  375. {
  376. "virtual_address": "0x00018000",
  377. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  378. "size": "0x000e7658"
  379. },
  380. {
  381. "virtual_address": "0x00000000",
  382. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  383. "size": "0x00000000"
  384. },
  385. {
  386. "virtual_address": "0x00000000",
  387. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  388. "size": "0x00000000"
  389. },
  390. {
  391. "virtual_address": "0x00100000",
  392. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  393. "size": "0x0000000c"
  394. },
  395. {
  396. "virtual_address": "0x00016f68",
  397. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  398. "size": "0x0000001c"
  399. },
  400. {
  401. "virtual_address": "0x00000000",
  402. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  403. "size": "0x00000000"
  404. },
  405. {
  406. "virtual_address": "0x00000000",
  407. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  408. "size": "0x00000000"
  409. },
  410. {
  411. "virtual_address": "0x00000000",
  412. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  413. "size": "0x00000000"
  414. },
  415. {
  416. "virtual_address": "0x00000000",
  417. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  418. "size": "0x00000000"
  419. },
  420. {
  421. "virtual_address": "0x00000000",
  422. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  423. "size": "0x00000000"
  424. },
  425. {
  426. "virtual_address": "0x00002000",
  427. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  428. "size": "0x00000008"
  429. },
  430. {
  431. "virtual_address": "0x00000000",
  432. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  433. "size": "0x00000000"
  434. },
  435. {
  436. "virtual_address": "0x00002008",
  437. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  438. "size": "0x00000048"
  439. },
  440. {
  441. "virtual_address": "0x00000000",
  442. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  443. "size": "0x00000000"
  444. }
  445. ],
  446. "exports": [],
  447. "guest_signers": {},
  448. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  449. "icon_fuzzy": null,
  450. "icon": null,
  451. "pdbpath": "C:\\xampp\\htdocs\\Aspire\\files\\zeenet_ZwxCaZzVZYcgFCje\\ZwxCaZzVZYcgFCjema.pdb",
  452. "imported_dll_count": 1,
  453. "versioninfo": []
  454. }
  455. }
  456.  
  457. [*] Resolved APIs: []
  458.  
  459. [*] Static Analysis: {
  460. "dotnet": {
  461. "customattrs": [],
  462. "assemblyinfo": {
  463. "version": "0.0.0.0",
  464. "name": "ZwxCaZzVZYcgFCjema"
  465. },
  466. "assemblyrefs": [
  467. {
  468. "version": "4.0.0.0",
  469. "name": "mscorlib"
  470. },
  471. {
  472. "version": "4.0.0.0",
  473. "name": "System"
  474. },
  475. {
  476. "version": "4.0.0.0",
  477. "name": "System.Web"
  478. },
  479. {
  480. "version": "2.6.10.0",
  481. "name": "System.Runtime"
  482. }
  483. ],
  484. "typerefs": [
  485. {
  486. "typename": "System.Net.Cookie",
  487. "assembly": "System"
  488. },
  489. {
  490. "typename": "System.Runtime.CompilerServices.CallerFilePathAttribute",
  491. "assembly": "System.Runtime"
  492. },
  493. {
  494. "typename": "System.Runtime.CompilerServices.CallerLineNumberAttribute",
  495. "assembly": "System.Runtime"
  496. },
  497. {
  498. "typename": "System.Runtime.CompilerServices.CallerMemberNameAttribute",
  499. "assembly": "System.Runtime"
  500. },
  501. {
  502. "typename": "System.Web.HttpServerUtility",
  503. "assembly": "System.Web"
  504. },
  505. {
  506. "typename": "System.Activator",
  507. "assembly": "mscorlib"
  508. },
  509. {
  510. "typename": "System.ArgumentNullException",
  511. "assembly": "mscorlib"
  512. },
  513. {
  514. "typename": "System.Array",
  515. "assembly": "mscorlib"
  516. },
  517. {
  518. "typename": "System.AsyncCallback",
  519. "assembly": "mscorlib"
  520. },
  521. {
  522. "typename": "System.Char",
  523. "assembly": "mscorlib"
  524. },
  525. {
  526. "typename": "System.Collections.Generic.IDictionary`2",
  527. "assembly": "mscorlib"
  528. },
  529. {
  530. "typename": "System.Convert",
  531. "assembly": "mscorlib"
  532. },
  533. {
  534. "typename": "System.DateTime",
  535. "assembly": "mscorlib"
  536. },
  537. {
  538. "typename": "System.Diagnostics.DebuggableAttribute",
  539. "assembly": "mscorlib"
  540. },
  541. {
  542. "typename": "System.Diagnostics.DebuggableAttribute/DebuggingModes",
  543. "assembly": "mscorlib"
  544. },
  545. {
  546. "typename": "System.Enum",
  547. "assembly": "mscorlib"
  548. },
  549. {
  550. "typename": "System.Exception",
  551. "assembly": "mscorlib"
  552. },
  553. {
  554. "typename": "System.Func`1",
  555. "assembly": "mscorlib"
  556. },
  557. {
  558. "typename": "System.GC",
  559. "assembly": "mscorlib"
  560. },
  561. {
  562. "typename": "System.IAsyncResult",
  563. "assembly": "mscorlib"
  564. },
  565. {
  566. "typename": "System.IDisposable",
  567. "assembly": "mscorlib"
  568. },
  569. {
  570. "typename": "System.IFormatProvider",
  571. "assembly": "mscorlib"
  572. },
  573. {
  574. "typename": "System.IO.Stream",
  575. "assembly": "mscorlib"
  576. },
  577. {
  578. "typename": "System.IO.StreamReader",
  579. "assembly": "mscorlib"
  580. },
  581. {
  582. "typename": "System.IO.TextReader",
  583. "assembly": "mscorlib"
  584. },
  585. {
  586. "typename": "System.Lazy`1",
  587. "assembly": "mscorlib"
  588. },
  589. {
  590. "typename": "System.MulticastDelegate",
  591. "assembly": "mscorlib"
  592. },
  593. {
  594. "typename": "System.Object",
  595. "assembly": "mscorlib"
  596. },
  597. {
  598. "typename": "System.ParamArrayAttribute",
  599. "assembly": "mscorlib"
  600. },
  601. {
  602. "typename": "System.Reflection.Assembly",
  603. "assembly": "mscorlib"
  604. },
  605. {
  606. "typename": "System.Reflection.MethodBase",
  607. "assembly": "mscorlib"
  608. },
  609. {
  610. "typename": "System.Reflection.MethodInfo",
  611. "assembly": "mscorlib"
  612. },
  613. {
  614. "typename": "System.Runtime.CompilerServices.CompilationRelaxationsAttribute",
  615. "assembly": "mscorlib"
  616. },
  617. {
  618. "typename": "System.Runtime.CompilerServices.CompilerGeneratedAttribute",
  619. "assembly": "mscorlib"
  620. },
  621. {
  622. "typename": "System.Runtime.CompilerServices.RuntimeCompatibilityAttribute",
  623. "assembly": "mscorlib"
  624. },
  625. {
  626. "typename": "System.RuntimeTypeHandle",
  627. "assembly": "mscorlib"
  628. },
  629. {
  630. "typename": "System.String",
  631. "assembly": "mscorlib"
  632. },
  633. {
  634. "typename": "System.Text.StringBuilder",
  635. "assembly": "mscorlib"
  636. },
  637. {
  638. "typename": "System.Type",
  639. "assembly": "mscorlib"
  640. }
  641. ]
  642. },
  643. "pe": {
  644. "peid_signatures": null,
  645. "imports": [
  646. {
  647. "imports": [
  648. {
  649. "name": "_CorExeMain",
  650. "address": "0x402000"
  651. }
  652. ],
  653. "dll": "mscoree.dll"
  654. }
  655. ],
  656. "digital_signers": null,
  657. "exported_dll_name": null,
  658. "actual_checksum": "0x00102d32",
  659. "overlay": null,
  660. "imagebase": "0x00400000",
  661. "reported_checksum": "0x00102d32",
  662. "icon_hash": null,
  663. "entrypoint": "0x0041703e",
  664. "timestamp": "2019-05-24 05:02:23",
  665. "osversion": "4.0",
  666. "sections": [
  667. {
  668. "name": ".text",
  669. "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
  670. "virtual_address": "0x00002000",
  671. "size_of_data": "0x00015200",
  672. "entropy": "5.66",
  673. "raw_address": "0x00000200",
  674. "virtual_size": "0x00015044",
  675. "characteristics_raw": "0x60000020"
  676. },
  677. {
  678. "name": ".rsrc",
  679. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
  680. "virtual_address": "0x00018000",
  681. "size_of_data": "0x000e7800",
  682. "entropy": "7.93",
  683. "raw_address": "0x00015400",
  684. "virtual_size": "0x000e7658",
  685. "characteristics_raw": "0x40000040"
  686. },
  687. {
  688. "name": ".reloc",
  689. "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
  690. "virtual_address": "0x00100000",
  691. "size_of_data": "0x00000200",
  692. "entropy": "0.10",
  693. "raw_address": "0x000fcc00",
  694. "virtual_size": "0x0000000c",
  695. "characteristics_raw": "0x42000040"
  696. }
  697. ],
  698. "resources": [],
  699. "dirents": [
  700. {
  701. "virtual_address": "0x00000000",
  702. "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
  703. "size": "0x00000000"
  704. },
  705. {
  706. "virtual_address": "0x00016fe8",
  707. "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
  708. "size": "0x00000053"
  709. },
  710. {
  711. "virtual_address": "0x00018000",
  712. "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
  713. "size": "0x000e7658"
  714. },
  715. {
  716. "virtual_address": "0x00000000",
  717. "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
  718. "size": "0x00000000"
  719. },
  720. {
  721. "virtual_address": "0x00000000",
  722. "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
  723. "size": "0x00000000"
  724. },
  725. {
  726. "virtual_address": "0x00100000",
  727. "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
  728. "size": "0x0000000c"
  729. },
  730. {
  731. "virtual_address": "0x00016f68",
  732. "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
  733. "size": "0x0000001c"
  734. },
  735. {
  736. "virtual_address": "0x00000000",
  737. "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
  738. "size": "0x00000000"
  739. },
  740. {
  741. "virtual_address": "0x00000000",
  742. "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
  743. "size": "0x00000000"
  744. },
  745. {
  746. "virtual_address": "0x00000000",
  747. "name": "IMAGE_DIRECTORY_ENTRY_TLS",
  748. "size": "0x00000000"
  749. },
  750. {
  751. "virtual_address": "0x00000000",
  752. "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
  753. "size": "0x00000000"
  754. },
  755. {
  756. "virtual_address": "0x00000000",
  757. "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
  758. "size": "0x00000000"
  759. },
  760. {
  761. "virtual_address": "0x00002000",
  762. "name": "IMAGE_DIRECTORY_ENTRY_IAT",
  763. "size": "0x00000008"
  764. },
  765. {
  766. "virtual_address": "0x00000000",
  767. "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
  768. "size": "0x00000000"
  769. },
  770. {
  771. "virtual_address": "0x00002008",
  772. "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
  773. "size": "0x00000048"
  774. },
  775. {
  776. "virtual_address": "0x00000000",
  777. "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
  778. "size": "0x00000000"
  779. }
  780. ],
  781. "exports": [],
  782. "guest_signers": {},
  783. "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744",
  784. "icon_fuzzy": null,
  785. "icon": null,
  786. "pdbpath": "C:\\xampp\\htdocs\\Aspire\\files\\zeenet_ZwxCaZzVZYcgFCje\\ZwxCaZzVZYcgFCjema.pdb",
  787. "imported_dll_count": 1,
  788. "versioninfo": []
  789. }
  790. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!