Benign Download

Trojan-Spy.Win32.Zbot.ckm

High entropy .data sectionPE lacks signature record
SHA-2566001df03d565d19639982f7bd9d9597bf7926977bd371c1b33de3dcb47212c96
MaleculeO(As)Md₃(Bi₂Si)

Evidence

High entropy .data section 0x1ba0–0x1ce0
⋯5 more rows
0x1bf000000000000000000000000000000000................
0x1c0068001f0000f8000000ce000b00f10020h..............
0x1c109e9000000000fd005e00923c009d0000........^..<....
0x1c20000a00000000ee0000000065001c61cd...........e..a.
0x1c3000000e31000019310000223100002f31...1...1.."1../1
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.