Suspicious 80% Download

Trojan.Win32.Dialer.cwj

Trojan dialer, packed, signed

Binary contains a UPX packing markerAuthenticode chain CN: Cyber Media Inc.
SHA-25639d016d0fbbf14a87e45af34ece21603c377498784e214ebba9c439bcb3e3186
MaleculeMd₂(BiSi₂)

Evidence

High-entropy UPX1 packed payload section 0x3c0–0x490
⋯3 more rows
0x3f05a650000101700000070000026000001Ze.......p..&...
0x400fb91cbcbe8000ce9001c90b9685a4000............hZ@.
0x4100ff6ae7cb21bb2683010241e1e59c31f...|...h0.$..Y..
0x420ecf92613b83f4c6c2fb3bfbb1cbc2b68..&..?Ll/.....+h
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.