Benign Download

Trojan-GameThief.Win32.OnLineGames.vp

Detects Pirpi Backdoor - and other malware (generic rule)Embedded PE binary at file offset 0x206e (~15806 bytes)

SHA-2568cd261ff24e073da513298df28170014d3e1801d590b6c3bd777ee62751ff3c2

MaleculeTh

Evidence

Detects Pirpi Backdoor - and other malware (generic rule) 0x1c35–0x1dd5

⋯7 more rows
0x1ca5000000e2f9eb8251568b753c8b742e78.......QV.u<.t.x
0x1cb503f5568b762003f533c94941ad03c533..V.v ..3.IA...3
0x1cc5db0fbe103ad67408c1cb0d03da40ebf1....:.t......@..
0x1cd53b1f75e75e8b5e2403dd668b0c4b8b5e;.u.^.^$..f..K.^
0x1ce51c03dd8b048b03c5ab5e59c3e886ffff.........^Y.....
⋯15 more rows

Embedded PE binary at file offset 0x206e (~15806 bytes) 0x202e–0x20fe

⋯3 more rows
0x205eadfcffff61e8a7fcffffe8a2fcffffc3....a...........
0x206e4d5a90000300000004000000ffff0000MZ..............
0x207eb8000000000000004000000000000000........@.......
0x208e00000000000000000000000000000000................
⋯7 more rows