Benign Download

Trojan-Banker.Win32.Banbra.adc

PE lacks signature recordThemida packer-name string reference
SHA-25613930fb302d22d07849e11ddaab65fe7ce072b7ef0e26292cf888ff9e59f873c
MaleculeO(As)Md₃(Bi₂Si)

Evidence

English function-word token "this" 0x0–0xb0
⋯4 more rows
0x40ba10000e1fb409cd21b8014ccd219090........!..L.!..
0x50546869732070726f6772616d206d7573This program mus
0x60742062652072756e20756e6465722057t be run under W
⋯5 more rows
Themida packer-name string reference 0x230–0x2f0
⋯3 more rows
0x260000000000000000000000000400000c0............@...
0x2705468656d6964612000102b000020f700Themida ..+.. ..
0x280005e150000923f000000000000000000.^....?.........
⋯7 more rows
English function-word token "for" 0xbbab4–0xbbb44
0xbbab43a6697384c93cba1067092dfe56c1f73:f.8L....p...l.s
0xbbac4ba2551594e8ce6c8292bc38125ddd062.%QYN...)+..%..b
0xbbad491d51dd9481c50329c6c9c46abb8af2f....H.P2.l.F.../
0xbbae4664f5285bdecfcea254b5c9a5afa129cfOR.....%K\.Z...
0xbbaf488259218e70c484094b755c41fa907a5.%[email protected].....
⋯5 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.