5a2e743ee754bec87ec8db9ee62e9e2312c256e24ba7435f502195ca097984aa.exe
Packed, unsigned, svchosts.exe impersonation
Large overlay with very low entropyEntry point in a writable RWX section
SHA-2565a2e743ee754bec87ec8db9ee62e9e2312c256e24ba7435f502195ca097984aa
MaleculeO₂(As₂Er)H₃(DbDsOs)Md₄(Bi₆PaSi)
Evidence
0x04d5a50000200000004000f00ffff0000MZP.............
0x10b80000000000000040001a0000000000........@.......
0x2000000000000000000000000000000000................
0x3000000000000000000000000000010000................
0x40ba10000e1fb409cd21b8014ccd219090........!..L.!..
0x50546869732070726f6772616d206d7573This program mus
0x60742062652072756e20756e6465722057t be run under W
⋯8 more rows
⋯3 more rows
0x3290000000000000000000000400000c02e...........@....
0x33961737061636b000010000000b0030000aspack..........
0x34910000000600100000000000000000000....`...........
⋯9 more rows
0x3e900000000000000000000000000000000................
0x3f9000000000000002043bbb21911aa803b....... C......;
0x409c79e6f9e49349349bb0242412011587d..o.I4.I..BA .X}
0x429025146328b54a1e68169024974953c9f.QF2.T...i.It.<.
0x4392c4955ad7bd5bca945b5b5796c1796a2,IU.{...E..yl...
0x4498d5d26848416ac014220a820fd247c15.]&.....B . .$|.
0x459881434089be481ac6f2dceb6e77b99db..4.....o-...{..
0x479cbdee85b7bc90ad6ec1bc582dabb215a...[{.........!Z
0x48943e9cb7202d72037ae40b78e406f6e48C..r.. 7.@..@onH
0x4992d7350e37362b5c807797203dbdc83db-sP.sb...yr.....
0x4a979920dedc06e72e0af2dcce7e3dfffffy....nr..-......
0x4b9f6fbfdebd7bf7f37e7cf7f37dfbf3ccd.......7...7..<.
0x4c9dfdbd7dfd0a60d04a6a2d635a3d6f09c...........5....
0x4d90b6e5efe7bf3842a2e33788ab90f98e4.n^.{..*.3x.....
0x4e9a179485e3e15769e49a85728552aed73.yH^>.v.I.W(U*.s
0x4f97eb3701bf8d6531f1bfe9fdc4391a7b0~.p...S.....C...
0x509b48dc07ae89ee199a5d4eaf57e1118b4...z........~...
0x519385937fe0337c30bfe07bfa567fb00208Y7..7......g..
0x5294850f3c759974541041da5982f9e71b0HP..Y.EA..../.q.
0x539e7c0279ee7aeb1f3bbfcc5e89cf2f3fb..'.............
0x54975f6311544f114d695a21d2f877759c2u.1.D....../.wY.
0x5592d958b246d3ed5aae92db5d874e35d87-..$m>...-..t.].
0x5694ad5df0c26cbe16603c868ce975640b2J...&..f..h..V@.
0x579d3922b62219159d170689c5159517ac4..+b!.Y.ph.QYQz.
0x58956144da8aba8b8a446d13ca2ad226844V.M.....F.<.."hD
0x599cc88d22aa22a922a7a2a6a2a522a4a25...*.*.*z*j*R*J%
0x5a9d44b88bda225b44b4895d17208b8f45c.K...%.KH..r...\
0x5b97223088b22fe244f48b94445510a8824r#..".$OH.DEQ..$
0x5c9508f50cd676f3cd5dd4e54dd76043a11P.P.go<..NT.v.:.
0x5d940b18ccbb4a0c6502fcbd85769a03f17@......P/..Wi.?.
0x5e999ac07f39c82172d62d141a2c4228145.......-b.A..".E
⋯3 more rows
0xc5f000000000000000000000000000000000................
0xc60000c042000cc042009c90420010d04200..B...B...B...B.
0xc61000000000000000000000000000000000................
0xc62000000000000000000000000000000000................
⋯7 more rows
⋯5 more rows
0x16ff000000000000000000000000000000000................
0x1700000000000000000000000000028d00300............(...
0x1701035d003000000000000000000000000005...............
0x1702000000000000000006b65726e656c3332........kernel32
⋯11 more rows
⋯5 more rows
0x17d4bd042000000000000000000a171ab0000.B..........q...
0x17d5b00000000000000000000000000000000................
0x17d6b00000000000000000000000000000000................
0x17d7b00000000000000000000000000000000................
0x17d8b00000000000000000000000000000000................
0x17d9b00000000000000000000000000000000................
0x17dab00000000000000000000000000000000................
0x17dbb00000000000000000000000000000000................
0x17dcb00000000000000000000000000000000................
0x17ddb00000000000000000000000000000000................
0x17deb00000000000000000000000000000000................
0x17dfb00000000000000000000000000000000................
0x17e0b00000000000000000000000000000000................
0x17e1b00000000000000000000000000000000................
0x17e2b00000000000000000000000000000000................
0x17e3b00000000000000000000000000000000................
0x17e4b00000000000000000000000000000000................
0x17e5b00000000000000000000000000000000................
0x17e6b00000000000000000000000000000000................
0x17e7b00000000000000000000000000000000................
0x17e8b00000000000000000000000000000000................
0x17e9b00000000000000000000000000000000................
0x17eab00000000000000000000000000000000................
0x17ebb00000000000000000000000000000000................
0x17ecb00000000000000000000000000000000................
0x17edb00000000000000000000000000000000................
0x17eeb00000000000000000000000000000000................
0x17efb00000000000000000000000000000000................
0x17f0b00000000000000000000000000000000................
0x17f1b00000000000000000000000000000000................
0x17f2b00000000000000000000000000000000................
0x17f3b00000000000000000000000000000000................
0x17f4b00000000000000000000000000000000................
0x17f5b00000000000000000000000000000000................
0x17f6b00000000000000000000000000000000................
0x17f7b00000000000000000000000000000000................
0x17f8b00000000000000000000000000000000................
0x17f9b00000000000000000000000000000000................
0x17fab00000000000000000000000000000000................
0x17fbb00000000000000000000000000000000................
0x17fcb00000000000000000000000000000000................
0x17fdb00000000000000000000000000000000................
0x17feb00000000000000000000000000000000................