Benign Download

Trojan-Spy.Win32.Zbot.cbs

High entropy .data sectionPE lacks signature record
SHA-256ec256d8783dd0d1dc94a28aa37ea95f4b58238255aa252a87a30fc9181cf1486
MaleculeO(As)Md₃(Bi₂Si)

Evidence

High entropy .data section 0x9a0–0xae0
⋯5 more rows
0x9f000000000000000000000000000000000................
0xa0000000000740013db005600cf00060000....t....V......
0xa10e10096800009650029d1d0f80000e3f9......e.).......
0xa20171200430000e1e000000d0000000000...C............
0xa301ac0000040a600005b068b1500000000....@...[.......
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.