Benign Download

Trojan-Spy.Win32.Zbot.cnr

High entropy .data sectionPE lacks signature record
SHA-25671f20d590d23a1d456c810af7e59fa76304824732a8c3598d7ea37dd0c3b489c

Evidence

High entropy .data section 0x19a0–0x1ae0
⋯5 more rows
0x19f000000000000000000000000000000000................
0x1a006ecbd800faed00a90000423100005631n.........B1..V1
0x1a1000006f3100007f31000094310000ac31..o1...1...1...1
0x1a200000c2310000d3310000e6310000f931...1...1...1...1
0x1a300000000000001b320000283200003232.......2..(2..22
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.