Suspicious 80% Download

Trojan.Win32.Buzus.affy

Named Trojan, evasion, signed anomaly

MZ DOS signature validation string
SHA-256a8239cc48f26cd3d2b7812c7333677d79ea9f1a6a65c9e73e7a8ecaed338c1b7
MaleculeO(Er)

Evidence

MZ DOS signature validation string 0x30e0–0x3200
⋯5 more rows
0x31307c00000002000000000000002e000000|...............
0x31404d005a0020007300690067006e006100M.Z. .s.i.g.n.a.
0x3150740075007200650020006e006f007400t.u.r.e. .n.o.t.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.