Suspicious 80% Download

Backdoor.Win32.Agent.pka

Named backdoor, evasion, signed anomaly

MZ DOS signature validation string
SHA-256b7269d5b8b9f2d6871413a1f4131f13913520db6c2b44766d233f78a443c0e4b
MaleculeO(Er)

Evidence

MZ DOS signature validation string 0x1c64–0x1d84
⋯5 more rows
0x1cb400007301ffffffff010000002e000000..s.............
0x1cc44d005a0020007300690067006e006100M.Z. .s.i.g.n.a.
0x1cd4740075007200650020006e006f007400t.u.r.e. .n.o.t.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.