Benign datamaliciousorder Download

Virus.Hijack_Gen.Trojan.ShellObject.p4Z@aG4Sr2m_3.vir

Embedded PE binary at file offset 0x1a200 (~139024 bytes)Encoded content decoded: xor

SHA-2563bcce606a25be0e705915a2dd7f357bbba98cb5003009483daadeb572dd43bf3

MaleculeMd

Evidence

Encoded content decoded: xor 0xe2d1–0xe441

⋯3 more rows
0xe301524f4a8954616893587573bc7e5633e0ROJ.Tah.Xus.~V3.
0xe3115f6773900d3c28974064298d5e70758f_gs..<(.@d).^pu.
0xe321447c61941970688d187a7481477a2892D|a..ph..zt.Gz(.
0xe33152776e9219776b8c086375840a7a62c6Rwn..wk..cu..zb.
0xe34156613a895260628145706fe056716895Va:.R`b.Epo.Vqh.
⋯3 more rows
0xe3810d3c28965e6172935b7a74941970688d.<(.^ar.[zt..ph.
0xe391186377935b7c60ce477b77e05f677390.cw.[|`.G{w._gs.
0xe3a10d3c28965e6172935b7a74941970688d.<(.^ar.[zt..ph.
0xe3b118636e905b7c60ce477b77df12603dc5.cn.[|`.G{w..`=.
0xe3c15e2922890d3674da12233e950d366eda^)"..6t..#>..6n.
0xe3d1122335840d3637d2532922d005770782.#5..67.S)"..w..
⋯7 more rows

Encoded content decoded: xor → base64 0xe89e–0xe96e

⋯3 more rows
0xe8ce13579258706293442035a65e61749437.W.Xpb.D 5.^at.7
0xe8de507585566762b4587c6b88527f77d305Pu.Vgb.X|k.R.w..
0xe8ee40698147606f8f43134ca5655d42ac04@i.G`o.C.L.e]B..
0xe8fe2129a47b5f07d5072327b01a56759258!).{_...#'..Vu.X
⋯7 more rows

Embedded PE binary at file offset 0x1a200 (~139024 bytes) 0x1a1c0–0x1a290

⋯3 more rows
0x1a1f02e696461746100001012000000000300.idata..........
0x1a2004d5a90000300000004000000ffff0000MZ..............
0x1a210b8000000000000004000000000000000........@.......
0x1a22000000000000000000000000000000000................
⋯7 more rows