Benign Download

Trojan-Spy.Win32.Zbot.coh

High entropy .data sectionPE lacks signature record
SHA-256ab31625bddfe962d1b67cbe1837add2ebf60b1235b2ea519ea532da5b2d926c3
MaleculeO(As)Md₃(Bi₂Si)

Evidence

High entropy .data section 0x19a0–0x1ae0
⋯5 more rows
0x19f000000000000000000000000000000000................
0x1a00dd006aa5000462321a007fe95d4a001f..j...b2....]J..
0x1a1000ca0083670000720000007f5d000000....g..r....]...
0x1a205aea92e2000000133100002a31000037Z.......1..*1..7
0x1a303100004d3100005b3100006c310000801..M1..[1..l1...
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.