Suspicious 80% Download

Backdoor.Win32.VanBot.aje

Named VanBot backdoor

MZ DOS signature validation string
SHA-2566c88c6caef2e5365408cac0f926d891df974e7eca06a7b241a8c0b9faf8d7afd
MaleculeO(Er)

Evidence

MZ DOS signature validation string 0x36a0–0x37c0
⋯5 more rows
0x36f0b830124000ffd0ffe00000002e000000.0.@............
0x37004d005a0020007300690067006e006100M.Z. .s.i.g.n.a.
0x3710740075007200650020006e006f007400t.u.r.e. .n.o.t.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.