Benign Download

Trojan-Dropper.Win32.Small.fp

Embedded PE binary at file offset 0xd8d (~57971 bytes)Detour-style InstallHook helper name
SHA-256de98812bb8afd4b04c2940d681ba4144df5c8b7b1de3ac101a32b0d4c7bc9554
MaleculeO(Er)

Evidence

Embedded PE binary at file offset 0xd8d (~57971 bytes) 0xd4d–0xe1d
⋯3 more rows
0xd7d00000000000000000000000046524545............FREE
0xd8d4d5a90000300000004000000ffff0000MZ..............
0xd9db8000000000000004000000000000000........@.......
0xdad00000000000000000000000000000000................
⋯7 more rows
Detour-style InstallHook helper name 0xb67f–0xb73f
⋯3 more rows
0xb6af0000ee360000fc360000000000000000...6...6........
0xb6bf496e7374616c6c486f6f6b000300556eInstallHook...Un
0xb6cf696e7374616c6c486f6f6b006d737274installHook.msrt
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.