{
  "ml": {
    "v": "7",
    "eng": "2.9.1",
    "lvl": -1,
    "conf": 0,
    "mods": [
      {
        "cls": 0,
        "raw": 0.000058680773,
        "rte": "az",
        "prob": 0.000058680773
      },
      {
        "cls": 0,
        "raw": 0.0026723742,
        "rte": "az/native",
        "prob": 0.0026723742
      },
      {
        "cls": 0,
        "raw": 0.0069601536,
        "rte": "az/pe",
        "prob": 0.0069601536
      }
    ],
    "prob": 0.000058680773,
    "files": [
      {
        "id": 0,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00005868077278137207,
        "type": "pe"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-12T21:27:00Z"
  },
  "path": "Trojan-Banker.Win32.Banker.abi",
  "raw": {
    "v": "8",
    "rev": "c7f7e",
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "o\u003cgu[0SSi21on@j%nJ60XbVHe00000kMzY5000000000000000000000000000000000000000000961X!1\u0026Kag8v0a?dLD+]@ggra]#!aAhvtxl4A$az(mxBrC47aAzQxaA.NjwPw[{x(kZZ4gjvt000000000000000000000000000000000000000000000000",
            "ln": 0
          }
        ],
        "mol": "H(U)",
        "sha": "d3b25a21738d708e6741be7a743c6cff91aa2c967ceaacc88947dca68f151d17",
        "path": "Trojan-Banker.Win32.Banker.abi",
        "risk": 1,
        "size": 456192,
        "type": "pe",
        "facts": {
          "imp": [
            [
              "kernel32.dll",
              "GetProcAddress"
            ],
            [
              "kernel32.dll",
              "GetModuleHandleA"
            ],
            [
              "kernel32.dll",
              "LoadLibraryA"
            ],
            [
              "user32.dll",
              "GetKeyboardType"
            ],
            [
              "advapi32.dll",
              "RegQueryValueExA"
            ],
            [
              "oleaut32.dll",
              "VariantChangeTypeEx"
            ],
            [
              "advapi32.dll",
              "RegSetValueExA"
            ],
            [
              "gdi32.dll",
              "UnrealizeObject"
            ],
            [
              "user32.dll",
              "keybd_event"
            ],
            [
              "ole32.dll",
              "CLSIDFromProgID"
            ],
            [
              "oleaut32.dll",
              "GetErrorInfo"
            ],
            [
              "comctl32.dll",
              "ImageList_SetIconSize"
            ],
            [
              "user32.dll",
              "DdeFreeStringHandle"
            ],
            [
              "wininet.dll",
              "InternetGetConnectedState"
            ],
            [
              "wsock32.dll",
              "WSACleanup"
            ],
            [
              "wininet.dll",
              "InternetSetFilePointer"
            ]
          ],
          "sec": [
            [
              "CODE",
              1024,
              205824,
              0.0,
              "rw-"
            ],
            [
              "DATA",
              206848,
              4096,
              0.0,
              "rw-"
            ],
            [
              "BSS",
              210944,
              0,
              0.0,
              "rw-"
            ],
            [
              ".idata",
              210944,
              3584,
              0.0,
              "rw-"
            ],
            [
              ".tls",
              214528,
              0,
              0.0,
              "rw-"
            ],
            [
              ".rdata",
              214528,
              512,
              0.0,
              "rw-"
            ],
            [
              ".reloc",
              215040,
              0,
              0.0,
              "rw-"
            ],
            [
              ".rsrc",
              215040,
              225280,
              0.0,
              "rw-"
            ],
            [
              ".aspack",
              440320,
              15872,
              0.0,
              "rw-"
            ],
            [
              ".adata",
              456192,
              0,
              0.0,
              "rw-"
            ]
          ],
          "metrics": {
            "pe": {
              "timestamp": 708992537,
              "image_size": 2371584,
              "headers_size": 1024,
              "parse_failed": 1,
              "partial_parse": 1,
              "file_alignment": 512,
              "recovered_imports": 16,
              "headers_size_ratio": 0,
              "recovered_sections": 10,
              "prose_section_count": 0,
              "executable_prose_section_count": 0,
              "directory_section_mismatch_count": 0
            },
            "file": {
              "size": 456192,
              "entropy": 7.97
            },
            "parse": {
              "error_count": 2
            },
            "binary": {
              "is_pie": 0,
              "data_entropy": 0,
              "string_count": 491,
              "avg_string_length": 6.73,
              "max_string_length": 80,
              "peak_region_bytes": 432128,
              "code_to_data_ratio": 0,
              "peak_region_entropy": 7.86,
              "string_length_stddev": 7.36,
              "largest_section_ratio": 0.49,
              "sentence_string_count": 5,
              "sentence_string_ratio": 0.01,
              "high_entropy_string_count": 0
            },
            "imports": {
              "count": 16
            },
            "sections": {
              "count": 10,
              "name_entropy": 3.98,
              "writable_count": 10,
              "executable_count": 0,
              "nonstandard_count": 5,
              "executable_writable_count": 0
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.binary_as_unknown": 1
            }
          }
        },
        "traits": [
          {
            "id": "micro-behaviors/ui/controls/widget::image-list-set-icon-size",
            "conf": 0.88,
            "crit": 3,
            "desc": "Image list icon size import",
            "spans": [
              [
                6549938,
                21
              ]
            ]
          }
        ]
      }
    ]
  }
}