Benign Download

VirusShare_993d5f997226dc73f25ca990502add25

Dynamic library loading via LoadLibraryW

SHA-2562d4faa3ceadb70488788b396735d35405d1edc3b50f84d32bc3056057bae6f67

MaleculeH(Ds)

Evidence

Go runtime markers 0xcf586–0xcf5c6

0xcf5866d652e68657864756d70576f72647300me.hexdumpWords.
0xcf59672756e74696d652e6d61696e0072756eruntime.main.run
0xcf5a674696d652e6d61696e2e66756e633200time.main.func2.
0xcf5b672756e74696d652e696e69742e370072runtime.init.7.r
0xcf5c6756e74696d652e666f72            untime.for      

Dynamic library loading via LoadLibraryW 0x12a010–0x12a170

⋯9 more rows
0x12a0a0000901001b090100010000001f090100................
0x12a0b01f090100010000000000000000000000................
0x12a0c080150100b515010001000000b8150100................
0x12a0d0dd150100010000000000000000000000................
0x12a0e0d0100100e810010001000000f0100100................
0x12a0f0f9100100010000000000000000000000................
0x12a10000070d0701000f074a0701004d074f07........J...M.O.
0x12a110010060086a0801000000000000000000..`.j...........
0x12a12080160100b816010001000000c0160100................
0x12a130c9160100010000000000000000000000................
⋯4 more rows

.dll extension reference 0x1ba020–0x1ba0a0

0x1ba02000000000000000006b65726e656c3332........kernel32
0x1ba0302e646c6c00000000577269746546696c.dll....WriteFil
0x1ba040650000005772697465436f6e736f6c65e...WriteConsole
⋯6 more rows

Configure waitable timer 0x1ba0cc–0x1ba0fc

0x1ba0cc6872656164000000536c656570000000hread...Sleep...
0x1ba0dc5365745761697461626c6554696d6572SetWaitableTimer
0x1ba0ec00000000536574556e68616e646c6564....SetUnhandled
0x1ba0fc457863657074696f6e46696c74657200ExceptionFilter.

Create extended waitable timer 0x1ba2a8–0x1ba2f8

0x1ba2a8706c696361746548616e646c65000000plicateHandle...
0x1ba2b84372656174655761697461626c655469CreateWaitableTi
0x1ba2c86d657245785700000000437265617465merExW....Create
0x1ba2d854687265616400000000437265617465Thread....Create
0x1ba2e8496f436f6d706c6574696f6e506f7274IoCompletionPort
0x1ba2f8000000004372                    ....Cr          