Suspicious 85% Download

VirusShare_25b3733890a6ae49178750e843fa4467

LNK targets executable archive

LNK launches user-directory EXEIdentifies archive (compressed) files in shortcut (LNK) files.
SHA-2564740b685ee2c0193e6dfd5d8d16878c2b5a4c262b10754ed06d5c493de88f0cd
MaleculeO(C)Th

Evidence

Identifies archive (compressed) files in shortcut (LNK) files. 0xe0–0x110
0xe00000ae0c2a0144006100740061003100....*.D.a.t.a.1.
0xf02e006300610062002e00650078006500..c.a.b...e.x.e.
0x10000001c000000540000001c0000000100......T.........
0x11000 .
LNK launches user-directory EXE 0x140–0x1c0
0x14067655c4465736b746f705c4461746131ge\Desktop\Data1
0x1502e6361622e6578650000110053007400.cab.exe....S.t.
0x1606f006e0065002c004900200068006100o.n.e.,.I. .h.a.
0x17074006500200079006f00750021002a00t.e. .y.o.u.!.*.
0x1802e002e005c002e002e005c002e002e00....\.....\.....
0x1905c002e002e005c002e002e005c002e00\.....\.....\...
0x1a02e005c002e002e005c00440065007300..\.....\.D.e.s.
0x1b06b0074006f0070005c00440061007400k.t.o.p.\.D.a.t.
0x1c0610031 a.1

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.