Suspicious 80% Download

Trojan.Win32.Buzus.nov

Named Trojan, evasion behavior

MZ DOS signature validation string
SHA-2568ee4dcba391a6eb73c37cdd38b6fdd0c474c5da41779a60adca361e7ad2615d5
MaleculeO(Er)

Evidence

MZ DOS signature validation string 0x318c–0x32ac
⋯5 more rows
0x31dc640065006c002000000000002e000000d.e.l. .........
0x31ec4d005a0020007300690067006e006100M.Z. .s.i.g.n.a.
0x31fc740075007200650020006e006f007400t.u.r.e. .n.o.t.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.