Trojan.Win32.Obfuscated.wri
IsDebuggerPresent API name in PE stringsReferences the IsDebuggerPresent API
SHA-2560aeda82b5e4fecc51ab5395c53a3b2536f95504324442fce301d1c4cff6646b0
MaleculeH(Po₂)Md(Bi)
Evidence
⋯3 more rows
0x295f000000000000000000000000000000000................
0x2960048c5030058c503006ac5030078c50300H...X...j...x...
0x296108ac50300a8c50300bcc50300cec50300................
0x29620e0c50300f0c5030002c6030020c60300............ ...
0x296303ac603004ec603005ec6030070c60300:...N...^...p...
⋯7 more rows
⋯3 more rows
0x2b0048dbf2abbaa728acbf7d02bbb1cafa42c..*..r....+....,
0x2b0147e8add2da6f0610c46f68abdcf15ab76~..-..a.F......v
0x2b024f9e0bbf37e31192f15f691eb5eac3b3b....~1./....^.;;
0x2b034a73522e41aaec3a5bdaf93074bbde4a5.5".........K...
0x2b0444f237e8aacaabf8dc64cc0053b06ca9aO#~......L..;...
0x2b054fa3a253c6e186c0d6bd8b89cf97c6082.:%<n.l.k....|`.
0x2b06415bd4916d159c3c22eec8a3ba1972d7a..I..Y.....;..-z
0x2b074aeb9d7e67e159984126cec93c7813115....~....l....1.
0x2b0842fcc17a5ebf254921594e60cc8f4dace/.....T.........
⋯21 more rows
⋯3 more rows
0x3ab9a6f66696c6553656374696f6e41002f02ofileSectionA./.
0x3abaa4973446562756767657250726573656eIsDebuggerPresen
0x3abba74002b01476574436f6e736f6c654d6ft.+.GetConsoleMo
0x3abca64650000b501476574537472696e6754de....GetStringT
⋯7 more rows