Benign Download

Trojan-Spy.Win32.Zbot.cvt

High entropy .data sectionPE lacks signature record
SHA-25618dbfb438f04afb3cdcfa2ab39df8b1ba26ae8e722bb46f644701d6a1bd040c1

Evidence

High entropy .data section 0x17a0–0x18e0
⋯5 more rows
0x17f000000000000000000000000000000000................
0x180000f4005500c8dfbf4b0000009f6a0000...U....K....j..
0x181000aa88139b00000000defb0000001000................
0x18202c210058300000172000000000000000,!.X0... .......
0x1830003a8a00001000000000260000000000.:........&.....
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.