Benign Download

Trojan-Spy.Win32.Zbot.dgr

High entropy .data sectionPE lacks signature record

SHA-2563f5612e13e04efd2d9062fce5deaa1e88d41c164d5a60d3699f7e405549e2d45

Evidence

High entropy .data section 0x1ba0–0x1ce0

⋯5 more rows
0x1bf000000000000000000000000000000000................
0x1c00ab000034babc005f0000007c00000000...4..._...|....
0x1c108d8700d600263b000000afe600005ced.....&;.......\.
0x1c204dde000000005c00b7dd000000009c00M.....\.........
0x1c3000004b00460000007eef763cc2c70000..K.F...~.v<....
⋯11 more rows

.NET Bitmap.GetPixel per-pixel read 0x1e38–0x1f48

⋯10 more rows
0x1ed848616c66746f6e6550616c6574746500HalftonePalette.
0x1ee86bc1476574506978656c006764693332k.GetPixel.gdi32
0x1ef82e646c6c00009d3b496d6167654c6973.dll...;ImageLis
⋯5 more rows