Benign Download

Trojan-Spy.Win32.Zbot.cam

High entropy .data sectionPE lacks signature record
SHA-256d6869d48b85c2addd5ecb634779a9073c61c02f40f8a48c9d294162cadcb5756
MaleculeO(As)Md₃(Bi₂Si)

Evidence

High entropy .data section 0x19a0–0x1ae0
⋯5 more rows
0x19f000000000000000000000000000000000................
0x1a0000000000008b00108a2300000000246e.........#....$n
0x1a1000004000658600002e0e560000d40043[email protected]
0x1a203500e2820000000037000036001900005.......7..6....
0x1a300000005a6e003000d3fb377f90006306...Zn.0...7...c.
⋯11 more rows
.NET Bitmap.GetPixel per-pixel read 0x1bcc–0x1c7c
⋯4 more rows
0x1c0c6c6574746500a0a54765744269746d61lette...GetBitma
0x1c1c70426974730033b7476574506978656cpBits.3.GetPixel
0x1c2c00705e43726561746548616c66746f6e.p^CreateHalfton
⋯5 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.