Benign Download

sdbot05b.plg

Shellcode marker in page source

SHA-256e2506403c9aebbb15f584d7d17644f09d9db00cbe630b1d2aca877823bb23c49

MaleculeO(Xe)

Evidence

English function-word token "with" lines 9–11

9:23… e "C:\DOCUME~1\Pyrox\LOCALS~1\Temp\RSP1424.tmp" with contents
10[
11/nologo /ML /W3 /GX /O1 /D "WIN32" /D "NDEBUG" /D "_WINDOWS" /D "_MBCS" /D "_DEBUG …

English function-word token "and" lines 11–14

11:112…  /Fo"debug/" /Fd"debug/" /FD /c 
12"C:\Documents and Settings\Pyrox\Desktop\M0LdBotv1.0-small\sources\sdbot05b.cpp"
13]
14Creating command line "cl.ex …

Shellcode marker in page source lines 20–29

20:16… bj"
21".\debug\lsass.obj"
22".\debug\ms04_007_asn1.obj"
23".\debug\shellcode.obj"
24".\debug\tftpd.obj"
25".\debug\upnp.obj"
⋯4 lines