Benign Download

Trojan-Spy.Win32.Zbot.dlh

High entropy .data sectionPE lacks signature record
SHA-256d71425831188e9f14bfabb8a50ffa0924a55a22aaab814ed4c9515a7290b6d47
MaleculeO(As)Md₃(Bi₂Si)

Evidence

High entropy .data section 0x19a0–0x1b80
⋯5 more rows
0x19f000000000000000000000000000000000................
0x1a0080300000903000009b300000b1300000.0...0...0...0..
0x1a10c0300000cf300000da300000e8300000.0...0...0...0..
0x1a2000310000103100000000000054300000.1...1......T0..
0x1a3000000000000000002331000000300000........#1...0..
⋯4 more rows
0x1a8037154765744269746d617042697473007.GetBitmapBits.
0x1a90deba476574506978656c003e40437265..GetPixel.>@Cre
0x1aa06174654272757368496e646972656374ateBrushIndirect
⋯14 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.