Benign Download

Trojan-GameThief.Win32.OnLineGames.wm

Detects Pirpi Backdoor - and other malware (generic rule)Embedded PE binary at file offset 0x229f (~39937 bytes)

SHA-256199dfbe3797168de6ebd3a9b50fbd9675f36f2fe8da531095928233fe9713f12

MaleculeTh

Evidence

Detects Pirpi Backdoor - and other malware (generic rule) 0x1e66–0x2006

⋯7 more rows
0x1ed6000000e2f9eb8251568b753c8b742e78.......QV.u<.t.x
0x1ee603f5568b762003f533c94941ad03c533..V.v ..3.IA...3
0x1ef6db0fbe103ad67408c1cb0d03da40ebf1....:.t......@..
0x1f063b1f75e75e8b5e2403dd668b0c4b8b5e;.u.^.^$..f..K.^
0x1f161c03dd8b048b03c5ab5e59c3e886ffff.........^Y.....
⋯15 more rows

Embedded PE binary at file offset 0x229f (~39937 bytes) 0x225f–0x232f

⋯3 more rows
0x228fadfcffff61e8a7fcffffe8a2fcffffc3....a...........
0x229f4d5a90000300000004000000ffff0000MZ..............
0x22afb8000000000000004000000000000000........@.......
0x22bf00000000000000000000000000000000................
⋯7 more rows