Benign Download

IM-Worm.Win32.Guap.bi

MZ DOS signature validation stringReferences the WScript.Shell COM object
SHA-256f339dacc702c19c4f88134aa55dcc2d873ad75c6290af2184b08c08f67311f8a
MaleculeO(Er)H(Os)

Evidence

MZ DOS signature validation string 0x4c90–0x4dd0
⋯3 more rows
0x4cc06e74726f6c506c616e6500001a000000ntrolPlane......
0x4cd057005300630072006900700074002e00W.S.c.r.i.p.t...
0x4ce05300680065006c006c00000052006500S.h.e.l.l...R.e.
0x4cf067005700720069007400650000000000g.W.r.i.t.e.....
0x4d00020000007c0000000200000000000000....|...........
0x4d102e0000004d005a002000730069006700....M.Z. .s.i.g.
0x4d206e006100740075007200650020006e00n.a.t.u.r.e. .n.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.