Benign Download

VirusShare_e03a41852950d1afea8ca700f9df2978

Dynamic library loading via LoadLibraryW

SHA-256300ba87010bf93ebbd084e8a678355667616db4cd49c1938b88af8d4fff55555

MaleculeH(Ds)

Evidence

Go runtime markers 0xa8ca2–0xa8cd2

0xa8ca26d652e68657864756d70576f72647300me.hexdumpWords.
0xa8cb272756e74696d652e6d61696e0072756eruntime.main.run
0xa8cc274696d652e696e69742e360072756e74time.init.6.runt
0xa8cd2696d652e666f726365676368        ime.forcegch    

Dynamic library loading via LoadLibraryW 0xea010–0xea160

⋯9 more rows
0xea0a0c4964800000000000800000000000000..H.............
0xea0b021944800000000000500000000000000!.H.............
0xea0c0f8924800000000000400000000000000..H.............
0xea0d0fc924800000000000400000000000000..H.............
0xea0e016954800000000000600000000000000..H.............
0xea0f048934800000000000400000000000000H.H.............
0xea100df9d4800000000000b00000000000000..H.............
0xea110fe934800000000000500000000000000..H.............
0xea1208e924800000000000300000000000000..H.............
0xea130169b4800000000000a00000000000000..H.............
⋯3 more rows

.dll extension reference 0x144620–0x1446a0

0x14462000000000000000006b65726e656c3332........kernel32
0x1446302e646c6c00000000577269746546696c.dll....WriteFil
0x144640650000005772697465436f6e736f6c65e...WriteConsole
⋯6 more rows

Configure waitable timer 0x1446cc–0x1446fc

0x1446cc6872656164000000536c656570000000hread...Sleep...
0x1446dc5365745761697461626c6554696d6572SetWaitableTimer
0x1446ec00000000536574556e68616e646c6564....SetUnhandled
0x1446fc457863657074696f6e46696c74657200ExceptionFilter.

Create extended waitable timer 0x1448a8–0x144928

0x1448a8706c696361746548616e646c65000000plicateHandle...
0x1448b84372656174655761697461626c655469CreateWaitableTi
0x1448c86d657245785700000000437265617465merExW....Create
0x1448d854687265616400000000437265617465Thread....Create
⋯5 more rows