Benign Download

Trojan-Downloader.Win32.Obfuscated.hdr

Image list icon size importWait for debug event from debuggee
SHA-256d848af35ab39b8c16c1a369278e4a15737c8bf21788ac8f10948d1bad40e9795
MaleculeH₂(PoU)

Evidence

Image list icon size import 0x30024–0x30194
⋯12 more rows
0x300e407d106001dd106002fd106004bd10600......../...K...
0x300f461d1060077d1060085d10600a5d10600a...w...........
0x30104bdd10600d5d10600e7d10600ffd10600................
0x3011413d206002dd2060047d2060059d20600....-...G...Y...
0x3012469d2060083d2060099d20600b5d20600i...............
⋯7 more rows
Wait for debug event from debuggee 0x3024c–0x3036c
⋯8 more rows
0x302cc6cda06007cda060094da0600aada0600l...|...........
0x302dcb6da0600c6da0600d2da0600eada0600................
0x302ecfeda06000adb060028db060038db0600........(...8...
0x302fc4adb06005edb06006adb060088db0600J...^...j.......
⋯7 more rows
References the Windows debugger output API 0x6d6c0–0x6d790
⋯3 more rows
0x6d6f0696669634c6f63616c54696d65008202ificLocalTime...
0x6d7004f75747075744465627567537472696eOutputDebugStrin
0x6d71067570000cc0147657454656d70506174gW....GetTempPat
0x6d720685700005403546c73416c6c6f630000hW..T.TlsAlloc..
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.