Suspicious 80% javascript Download

banyancode-windows-x64-baseline 26.9.6

Embedded PE in Bun binary

Package under two months oldRegistry package lists one maintainer
SHA-2560692a24d663c0b3c81d5a562d87e0f811f9743e4e7e65e59c21d45cd2d816756
URLhttps://registry.npmjs.org/banyancode-windows-x64-baseline/-/banyancode-windows-x64-baseline-26.9.6.tgz
MaleculeMdTh

Evidence

Detects SystemBC 0x38d33e0–0x38d34a0
⋯3 more rows
0x38d3410b0aa294001000000e0aa294001000000..)@......)@....
0x38d3420737461727420696e6465782020697320start index is
0x38d34306c6172676572207468616e20656e6420larger than end
⋯7 more rows
Embedded PE binary at file offset 0x3c9eb78 (~32768 bytes) 0x3c9eb38–0x3c9ec08
⋯3 more rows
0x3c9eb681100000000000000e202000053000000............S...
0x3c9eb784d5a7800010000000400000000000000MZx.............
0x3c9eb8800000000000000004000000000000000........@.......
0x3c9eb9800000000000000000000000000000000................
⋯7 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.