Benign Download

Trojan-PSW.Win32.Gamec.p

Detects an XORed URL in an executableEncoded content decoded: xor
SHA-2565c07eef02e2ec22e91f24f15814f29d172d018d65c96b57d8c32081915dbc3a2
MaleculeMdTh

Evidence

Encoded content decoded: xor 0x55f0–0x56d0
⋯3 more rows
0x5620ffffebeb8be55dc3ffffffff2d000000......].....-...
0x5630d3efe6f4f7e1f2e5dccde9e3f2eff3ef................
0x5640e6f4dcd7e9eee4eff7f3dcc3f5f2f2e5................
0x5650eef4d6e5f2f3e9efeedcd2f5ee000000................
0x5660ffffffff02000000f2f80000ffffffff................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.