Benign Download

Trojan-Spy.Win32.Zbot.cfx

High entropy .data sectionPE lacks signature record
SHA-25651a365254b46e25aa402404abfc341037fbb71ae2eeb986f7784e39a90f178d7
MaleculeO(As)Md₃(Bi₂Si)

Evidence

High entropy .data section 0x15a0–0x16e0
⋯5 more rows
0x15f000000000000000000000000000000000................
0x160029e3ac3300c246af00007fb7329700af)..3..F.....2...
0x16105a00c8000000000000001d005f000000Z..........._...
0x16200000000000cf0000a8000000c3930000................
0x1630fe502b00001b85c8d600826a0000e000.P+........j....
⋯11 more rows
.NET Bitmap.GetPixel per-pixel read 0x1819–0x18e9
0x1819476574436c6970426f7800965d437265GetClipBox..]Cre
0x182961746550656e496e6469726563740067atePenIndirect.g
0x1839cc4372656174654269746d617000a9de.CreateBitmap...
0x1849476574506978656c0024804765744272GetPixel.$.GetBr
0x18597573684f72674578000af94372656174ushOrgEx...Creat
⋯9 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.