Suspicious 80% Download

Trojan.Win32.Buzus.adjx

Named Trojan, debugger evasion

MZ DOS signature validation stringReferences the Windows debugger output API
SHA-2567dcdeda12f473b516e5111ef37e870cea67867c7d3dfd7a4eb2c928cb84cb33b
MaleculeO(Er)H(Po)

Evidence

References the Windows debugger output API 0x199c–0x1a6c
⋯3 more rows
0x19ccb850104000ffd0ffe000000013000000.P.@............
0x19dc4f75747075744465627567537472696eOutputDebugStrin
0x19ec67410000564241362e444c4c00000000gA..VBA6.DLL....
0x19fc0c000000436c6f736548616e646c6500....CloseHandle.
⋯7 more rows
MZ DOS signature validation string 0x1b6c–0x1c8c
⋯5 more rows
0x1bbc00000000541a4000f43440002e000000[email protected]@.....
0x1bcc4d005a0020007300690067006e006100M.Z. .s.i.g.n.a.
0x1bdc740075007200650020006e006f007400t.u.r.e. .n.o.t.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.