Benign Download

Trojan-Spy.Win32.Zbot.dbi

High entropy .data sectionPE lacks signature record
SHA-256532a4da4d0c75cdab50c753ff9d7129716b47130c99ae4eaa3989eb5a1ba07b3
MaleculeO(As)Md₃(Bi₂Si)

Evidence

High entropy .data section 0x17a0–0x18e0
⋯5 more rows
0x17f000000000000000000000000000000000................
0x1800bd0000e800000000003ee50008123e00.........>....>.
0x1810e4000000520000000009a400ac1e0000....R...........
0x182000003a6da8f80000000034ab000000c2..:m......4.....
0x18300000000028005b00009e00fa2e000000....(.[.........
⋯11 more rows
.NET Bitmap.GetPixel per-pixel read 0x199c–0x1a5c
0x199c6f6d70617469626c654269746d617000ompatibleBitmap.
0x19acd3e1457874546578744f757441008192..ExtTextOutA...
0x19bc43726561746550616c657474650098e5CreatePalette...
0x19cc476574506978656c009c3044656c6574GetPixel..0Delet
0x19dc65444300bec243726561746542727573eDC...CreateBrus
⋯8 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.