Benign Download

VirusShare_e2a8057daa4ba4f599b670b7360f135c

Dynamic library loading via LoadLibraryW

SHA-256020b4b4ebbaca7112edb2e9d6caa8d7630bf56f8fd08a779ee51d02b2b4e4027

MaleculeH(Ds)

Evidence

Go runtime markers 0x948be–0x948fe

0x948be6d652e68657864756d70576f72647300me.hexdumpWords.
0x948ce72756e74696d652e6d61696e0072756eruntime.main.run
0x948de74696d652e6d61696e2e66756e633200time.main.func2.
0x948ee72756e74696d652e696e69742e370072runtime.init.7.r
0x948fe756e74696d652e666f72            untime.for      

Dynamic library loading via LoadLibraryW 0xd8010–0xd8170

⋯9 more rows
0xd80a00100000000000000f8b94d0000000000..........M.....
0xd80b0c0a94d00000000000000000000000000..M.............
0xd80c0c35a4700000000001500000000000000.ZG.............
0xd80d0d35e4700000000001600000000000000.^G.............
0xd80e00c494700000000001000000000000000.IG.............
0xd80f0e9564700000000001400000000000000.VG.............
0xd8100b69c4700000000003100000000000000..G.....1.......
0xd811040f7460000000000a0c34d0000000000@.F.......M.....
0xd812069634700000000001700000000000000icG.............
0xd813085754700000000001c00000000000000.uG.............
⋯4 more rows

.dll extension reference 0xda620–0xda6a0

0xda62000000000000000006b65726e656c3332........kernel32
0xda6302e646c6c00000000577269746546696c.dll....WriteFil
0xda640650000005772697465436f6e736f6c65e...WriteConsole
⋯6 more rows

Configure waitable timer 0xda6cc–0xda6fc

0xda6cc6872656164000000536c656570000000hread...Sleep...
0xda6dc5365745761697461626c6554696d6572SetWaitableTimer
0xda6ec00000000536574556e68616e646c6564....SetUnhandled
0xda6fc457863657074696f6e46696c74657200ExceptionFilter.

Create extended waitable timer 0xda8a8–0xda8f8

0xda8a8706c696361746548616e646c65000000plicateHandle...
0xda8b84372656174655761697461626c655469CreateWaitableTi
0xda8c86d657245785700000000437265617465merExW....Create
0xda8d854687265616400000000437265617465Thread....Create
0xda8e8496f436f6d706c6574696f6e506f7274IoCompletionPort
0xda8f8000000004372                    ....Cr          