Benign Download

Trojan-GameThief.Win32.OnLineGames.sjrr

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2560781366a3e2d1ec3ec8ca88777a23a4316b900cb0a28c2992554a26c46b07cd7
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x65f4–0x66d4
⋯3 more rows
0x66240000000020000000300000004a000000.... ...0...J...
0x6634223e3e3a7065653d3d3d64263f253922">>:pee===d&?%9"
0x66442b2823642924650c0c7e797f0e0c0d02+(#d)$e..~y.....
0x66547c652623242b2b282829642b393a0000|e&#$++(()d+9:..
0x66642530325800000000fffefdfc00000000%02X............
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.