74551
Packed unsigned trojan with decrypted browser/AV strings
Write-only high-entropy section payloadLarge anonymous PE section
SHA-2564c6bdf91b0a17aa07a8ca93c877f1f80fba5bfb813dac43845493e29e7df911f
Evidence
⋯5 more rows
0x20033c941ff1313c9ff1372f8c3a9dd02003.A......r......
0x210b6dd020000000000004042002c014000.........@B.,.@.
0x230422ea036302e444ce3c0805fe2760162B..60.DL..._.v.b
0x2406153747249329d194386636f73111f61aStrI2..C.cos..a
0x250646a07667074756e2c2034a60c7b4671dj.fptun, 4..{Fq
0x260657656eb4c0e4cfa6e10427374b369f1evV.L.L.n.Bst.i.
0x2706549cc70756874633b531e5d4d6fdc65eI.puhtc;S.]Mo.e
0x280310202b74f446d5e760216b8315095701...ODm^v...1P.p
0x290337d9d0f6976256d3638744fee6aaa303}..iv%m68tO.j.0
0x2a0149ec5266d31331f52d863416e077369...&m13.R.cAn.si
0x2b0546f556eb45032060971901b436f1c70ToUn.P2..q..Co.p
0x2c0794285746573388f43ebfeb1576ff545yB.tes8.C...Wo.E
0x2d0f46368ce486c25416428c37305657446.ch.Hl%Ad(.s.etF
0x2e0697838d453dc20db791e1cdc4572556fix8.S. .y...ErUo
0x2f0158c48fc7306756c744368f4556b995e..H.s.ultCh.Uk.^
0x3000d74adc5883332e14172792338981b44.t...32.Ary#8..D
0x31065c5597563288d453f7869b250c46338e.Yuc(.E?xi.P.c8
0x3204f6ea77034c9508858f13136da9e1d83On.p4.P.X.16....
0x330c28d0a9566235bf525244c0c0709c091....f#[.%$L.....
0x3400068dedbe870523891f9a83f506e2b76.h...pR8...?Pn+v
0x350890c1903dd6b73508503696c65439cc7.....ksP..ileC..
0x3601d5c20457256074e545f5349574b5ce9.\ ErV.NT_SIWK\.
0x370528b24690e5f706d70a11110192157c9R.$i._pmp....!W.
0x380344ea7530024446e0546756e07f8696f4N.S.$Dn.Fun..io
0x390590d8b184a3c73ff922a642dd101c06dY...J<s..*d-...m
0x3a0502564e3a7ef722df2da679123c41a43P%d...r-..g.#..C
0x3b084b6438a374714240ea413241948b4db..C.7G.$...$.H..
0x3c04032ca614c738eca57f9617172744f21@2.aLs..W.aqrtO!
0x3d0195175ec7930c674c90c668f1d722d9e.Qu.y0.t..f..r-.
0x3e0a6161114488132647c72843cc6ddb4f5....H.2d|r.<....
0x3f069a9541d24607246879848546463c7c8i.T.$`rF..HTdc..
0x40009c8935d3db75ea448e540285e89125c...]=.^.H.@(^..\
0x410dc50a46da22014ee49551ca4d951a906.P.m. ..IU...Q..
0x420394d1a23d2d46f681e9f6617095284df9M.#..oh..f..R..
0x43050b467a5c32450474f9ad7b2287747d7P.g..$PGO...(wG.
0x4408e4f7075698f4ea97794ae9017d1d24a.Opui.N.w......J
0x45029875a946e10ca3a77ea24a4eafbb579).Z.n..:w.$....y
0x460dba623777a6a8a67cfb425c9cf0d1231..#wzj.g..%....1
0x4700c25bc341431a1623f5b4543659083cc.%.4.1.b?[ECe...
0x4804109accb1363164c584c38246b107044A....c.LXL8$k.pD
0x4907549708fa48d0393676429f361ec020fuIp.....gd).a...
0x7318c642003404000078cc420094010000d4.B.4...x.B......
0x7328d64200a8010000e4dd42000111000000.B.......B......
0x7338000000000000006a69616e3779657478.......jian7yetx
0x73482e657865000000d0635c00f400000058.exe....c\.....X
0x7358e65c0000010000c4e75c002001000038.\.......\. ...8
0x7368e95c00900300006cf15c005906000000.\.....l.\.Y....
0x7378000000000000000000000068010000c8...........h....
0x738878ba064c010000d47aba0638010000dcx..L....z..8....
0x73987cba0628010000e47eba0618010000ec|..(....~.......
0x73a880ba0608 ....
0x8aa9685d08002200224dc5cb6c5d080018b7h].."."M..l]....
0x8ab9fb8c6c0800c5cb575d0800182200a014..l....W]..."...
0x8ac9590000a3008b00007000a062bffecbc3Y.......p..b....
0x8ad9b71dc3a4290066002d0030002d000000....).f.-.0.-...
0x8ae914003b0031003b003c002d0025007b00..;.1.;.<.-.%.{.
0x8af97a0014002c00240024002b0029002b00z...,.$.$.+.).+.
0x8b0920002d0014002d003000380024002700 .-...-.0.8.$.'.
0x8b193a002d003a0066002d0030002d000000:.-.:.f.-.0.-...
0x8b29000014002d0030003800240027003a00....-.0.8.$.'.:.
0x8b392d003a0066002d0030002d0000000000-.:.f.-.0.-.....
0x8b491c4e000025383a662c242400292c3e29.N..%8:f,$$.),>)
0x8b5938217b7a662c2424003f3b7a177b7a668!{zf,$$.?;z.{zf
0x8b692c2424003d3b2d3a7b7a662c2424003d,$$.=;-:{zf,$$.=
0x8b793a24252726662c2424003f212621262d:$%'&f,$$.?!&!&-
0x8b893c662c2424000f7200000000000f0072<f,$$..r.......r
0x8b9900140000000000000000a00000000013................
0x8ba9c9a3bc5d0800a32320a8db4c00b7db20...]...# ..L...
0x8bb96c0800f11200000019c0c3935d0800c5l...........]...
0x8bc9cb935d080018b7db246c0800cbb04a3d..].....$l....J=
0x8bd970c2cb935d0800c0cbaa5d08007b88c0p...].....]..{..
0x8be9cbaf5d08007b88c1cba35d08002200c5..]..{....].."..
0x8bf9cbaa ..
0xb66c00650072002e00650078006500000000.e.r...e.x.e....
0xb67c00500600006d70722e646c6c00616476.P...mpr.dll.adv
0xb68c61706933322e646c6c007773325f3332api32.dll.ws2_32
0xb69c2e646c6c007573657233322e646c6c00.dll.user32.dll.
0xb6ac75726c6d6f6e2e646c6c0077696e696eurlmon.dll.winin
0xb6bc65742e646c6c00473a00000000004700et.dll.G:.....G.
0xb6cc3a005c0000000005000000e800000000:.\.............
0x1824700450031005c00500052004f00470052.E.1.\.P.R.O.G.R
0x182570041004d002000460049004c00450053.A.M. .F.I.L.E.S
0x18267005c005400520045004e00440020004d.\.T.R.E.N.D. .M
0x18277004900430052004f005c004f00460046.I.C.R.O.\.O.F.F
0x18287004900430045005300430041004e0020.I.C.E.S.C.A.N.
0x182970043004c00490045004e0054005c0043.C.L.I.E.N.T.\.C
0x182a7004c00490045004e005400480045004c.L.I.E.N.T.H.E.L
0x182b70050005c005700480044004100540041.P.\.W.H.D.A.T.A
0x182c7005c00570048004900440058002e0048.\.W.H.I.D.X...H
0x182d70054004d0000005c0044004500560049.T.M...\.D.E.V.I
0x182e700430045005c00480041005200440044.C.E.\.H.A.R.D.D
0x182f700490053004b0056004f004c0055004d.I.S.K.V.O.L.U.M
0x1830700450031005c00570049004e0044004f.E.1.\.W.I.N.D.O
0x1831700570053005c00540045004d0050005c.W.S.\.T.E.M.P.\
0x18327007e004400460037003300370043002e.~.D.F.7.3.7.C..
0x183370054004d00500000005c004400450056.T.M.P...\.D.E.V
0x18347004900430045005c0048004100520044.I.C.E.\.H.A.R.D
0x18357004400490053004b0056004f004c0055.D.I.S.K.V.O.L.U
0x18367004d00450031005c0044004f00430055.M.E.1.\.D.O.C.U
0x18377004d0045004e0054005300200041004e.M.E.N.T.S. .A.N
0x183870044002000530045005400540049004e.D. .S.E.T.T.I.N
0x1839700470053005c00410044004d0049004e.G.S.\.A.D.M.I.N
0x183a7004900530054005200410054004f0052.I.S.T.R.A.T.O.R
0x183b7005c004c004f00430041004c00200053.\.L.O.C.A.L. .S
0x183c70045005400540049004e00470053005c.E.T.T.I.N.G.S.\
0x183d700540045004d0050004f005200410052.T.E.M.P.O.R.A.R
0x183e7005900200049004e005400450052004e.Y. .I.N.T.E.R.N
0x183f700450054002000460049004c00450053.E.T. .F.I.L.E.S
0x18407005c0043004f004e00540045004e0054.\.C.O.N.T.E.N.T
0x18417002e004900450035005c00590056004a...I.E.5.\.Y.V.J
0x1842700420044003300510044005c004e0034.B.D.3.Q.D.\.N.4
0x18437005f0048004f004d0045005f00480054._.H.O.M.E._.H.T
0x18447004d004c005f0038005b0031005d002e.M.L._.8.[.1.]..
0x1845700480054004d0000005c004400450056.H.T.M...\.D.E.V
0x18467004900430045005c0048004100520044.I.C.E.\.H.A.R.D
0x18477004400490053004b0056004f004c0055.D.I.S.K.V.O.L.U
0x18487004d00450031005c0044004f00430055.M.E.1.\.D.O.C.U
0x18497004d0045004e0054005300200041004e.M.E.N.T.S. .A.N
0x184a70044002000530045005400540049004e.D. .S.E.T.T.I.N
0x184b700470053005c00410044004d0049004e.G.S.\.A.D.M.I.N
0x184c7004900530054005200410054004f0052.I.S.T.R.A.T.O.R
0x184d7005c004c004f00430041004c00200053.\.L.O.C.A.L. .S
0x184e70045005400540049004e00470053005c.E.T.T.I.N.G.S.\
0x184f700540045004d0050004f005200410052.T.E.M.P.O.R.A.R