Benign Download

Trojan.Win32.VB.vdl

PE could not be identified by filefactsIsDebuggerPresent API name in PE strings
SHA-256a939ecd2c40407692e29eb7012cab3f398854658dd945522592cea16e7e4d8af
MaleculeO(Al)H(Po₂)

Evidence

PE could not be identified by filefacts 0x0–0xe0
0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000000100000000000000................
0x2000000000000000000000000000000000................
0x30000000000000000000000000c8000000................
⋯11 more rows
IsDebuggerPresent API name in PE strings 0x72dc–0x73ec
⋯3 more rows
0x730cb8402e0001ffd0ffe000000013000000.@..............
0x731c4f75747075744465627567537472696eOutputDebugStrin
0x732c67410000647000011c73000100000400gA..dp...s......
0x733cc04203010000000000000000a1c84203.B............B.
0x734c010bc07402ffe06830730001b8402e00...t...h0s...@..
0x735c01ffd0ffe00000001200000049734465............IsDe
0x736c62756767657250726573656e74000000buggerPresent...
0x737c647000016873000100000400cc420301dp..hs.......B..
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.