Benign Download

Trojan-Spy.Win32.Zbot.drr

High entropy .data sectionPE lacks signature record
SHA-2562b44d70e89ecdfbe27ada785dbf01ea85368a769fd5375468eebe7a24adf3e45

Evidence

High entropy .data section 0x15a0–0x1760
⋯5 more rows
0x15f000000000000000000000000000000000................
0x1600783000008b3000009a300000a6300000x0...0...0...0..
0x1610b7300000c6300000d4300000e1300000.0...0...0...0..
0x1620f7300000000000005030000000000000.0......P0......
0x163000000000073100000030000000000000.....1...0......
⋯19 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.