Benign Download

Trojan-GameThief.Win32.Lmir.ac

Detects sample found in Thrip report by Symantec Embedded PE binary at file offset 0x7e00 (~4608 bytes)
SHA-256a9f7739e0272d93494d320ae334c21bdb801cdc2d2c5bfe78c3c37d748c00d48
MaleculeTh

Evidence

Detects sample found in Thrip report by Symantec 0x0–0x170
⋯3 more rows
0x30000000000000000000000000d0000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732050726f6772616d2063616e6e6fis Program canno
0x60742062652072756e20696e20444f5320t be run in DOS
0x706d6f64652e0d0d0a2400000000000000mode....$.......
0x80f50b251db16a4b4eb16a4b4eb16a4b4e..%..jKN.jKN.jKN
⋯15 more rows
Embedded PE binary at file offset 0x7e00 (~4608 bytes) 0x7dc0–0x7e90
⋯3 more rows
0x7df000000000000000000000000000000000................
0x7e004d5a90000300000004000000ffff0000MZ..............
0x7e10b8000000000000004000000000000000........@.......
0x7e2000000000000000000000000000000000................
⋯7 more rows
Detects sample found in Thrip report by Symantec 0x0–0x170
⋯3 more rows
0x30000000000000000000000000d0000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732050726f6772616d2063616e6e6fis Program canno
0x60742062652072756e20696e20444f5320t be run in DOS
0x706d6f64652e0d0d0a2400000000000000mode....$.......
0x80f50b251db16a4b4eb16a4b4eb16a4b4e..%..jKN.jKN.jKN
⋯15 more rows
Embedded PE binary at file offset 0x7e00 (~4608 bytes) 0x7dc0–0x7e90
⋯3 more rows
0x7df000000000000000000000000000000000................
0x7e004d5a90000300000004000000ffff0000MZ..............
0x7e10b8000000000000004000000000000000........@.......
0x7e2000000000000000000000000000000000................
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.