Benign Download

Trojan-GameThief.Win32.Magania.bez

Detects an XORed URL in an executableEncoded content decoded: xor

SHA-256dd78cd15013d2e6386d12493f2f743a464044d20ff024c1353839e207e56ae46

MaleculeMdTh

Evidence

Detects an XORed URL in an executable 0x57fc–0x58bc

⋯3 more rows
0x582ceb5f5e5b8be55dc3ffffffff07000000._^[..].........
0x583c687474703a2f2f00ffffffff01000000http://.........
0x584c2f000000558bec51b9890000006a006a/...U..Q.....j.j
⋯7 more rows

Encoded content decoded: xor 0x1487c–0x14b6c

⋯3 more rows
0x148ac6959575300000000ffffffff1e000000iYWS............
0x148bce8f4f4f0baafaff4f7aee7e1f3e8e3e1................
0x148ccf2e4aee7e1ede1eee9e1aee3efed0000................
0x148dcffffffff1f000000e8f4f4f0baafaff4................
0x148ecf7aee7e1f3e8e3e1f2e4aee7e1ede1ee................
0x148fce9e1aee3efedaf00ffffffff28000000............(...
0x1490ce8f4f4f0baafaff4f7aee7e1f3e8e3e1................
0x1491cf2e4aee7e1ede1eee9e1aee3efedafe9................
0x1492ceee4e5f8aee1f3f000000000ffffffff................
0x1493c2a000000e8f4f4f0f3baafaff4f7aee7*...............
0x1494ce1f3e8aee7e1ede1eee9e1aee3efedaf................
0x1495cc7c1d3c8ccefe7e9eeaee1f3f0f80000................
0x1496cffffffff1b000000e8f4f4f0f3baafaf................
0x1497cf4f7aee7e1f3e8aee7e1ede1eee9e1ae................
0x1498ce3efed00ffffffff1c000000e8f4f4f0................
0x1499cf3baafaff4f7aee7e1f3e8aee7e1ede1................
0x149aceee9e1aee3efedaf00000000ffffffff................
0x149bc2a000000e8f4f4f0f3baafaff4f7aee7*...............
0x149ccefefe4ecefe3ebaee7e1ede1eee9e1ae................
0x149dce3efedafe9eee4e5f8aee1f3f0f80000................
0x149ecffffffff2a000000e8f4f4f0f3baafaf....*...........
0x149fcf4f7aee7efefe4ecefe3ebaee7e1ede1................
0x14a0ceee9e1aee3efedafc9eee4e5f8aee1f3................
0x14a1cf0f80000ffffffff2b000000e8f4f4f0........+.......
0x14a2cbaafaff4f7aee7e1ede1eee9e1aee3ef................
0x14a3cedafc7c8cfcdc5afc8efede5dfc3e5ee................
0x14a4cf4e5f2aec1d3d000ffffffff16000000................
0x14a5ce8f4f4f0baafaff4f7aee7e1ede1eee9................
0x14a6ce1aee3efedaf0000ffffffff15000000................
0x14a7ce8f4f4f0baafaff4f7aee7e1ede1eee9................
0x14a8ce1aee3efed000000ffffffff2e000000................
0x14a9ce8f4f4f0baafaff4f7aee7e1ede1eee9................
0x14aace1aee3efedafe4e5e6e1f5ecf4aee1f3................
0x14abcf0bff5f3e5f2dfecefe3e1f4e5bd0000................
0x14accffffffff26000000e8f4f4f0f3baafaf....&...........
0x14adcf4f7aee7e1f3e8aee7e1ede1eee9e1ae................
0x14aece3efedafc2ece1eeebaee1f3f0f80000................
0x14afcffffffff28000000e8f4f4f0baafaff4....(...........
0x14b0cf7aee7e1f3e8e3e1f2e4aee7e1ede1ee................
0x14b1ce9e1aee3efedaff3f0e1e3e5aee8f4ed................
0x14b2c00000000ffffffff1f000000e8f4f4f0................
0x14b3cf3baafaff4f7aee7efefe4ecefe3ebae................
⋯3 more rows