Benign Download

Trojan.Win32.Buzus.tpg

MZ DOS signature validation stringEmbedded PE binary at file offset 0xc5f4 (~36864 bytes)
SHA-256f871f62b1b123488d926bf1e0f17c02c1b66e9673dce85b8e09f71b6f5d42039
MaleculeO(Er)

Evidence

Embedded PE binary at file offset 0xc5f4 (~36864 bytes) 0xc5b4–0xc684
⋯3 more rows
0xc5e4d5c00000000049454e44ae4260825041......IEND.B`.PA
0xc5f44d5a90000300000004000000ffff0000MZ..............
0xc604b8000000000000004000000000000000........@.......
0xc61400000000000000000000000000000000................
⋯7 more rows
MZ DOS signature validation string 0xfc94–0xfdb4
⋯5 more rows
0xfce4b830124000ffd0ffe00000002e000000.0.@............
0xfcf44d005a0020007300690067006e006100M.Z. .s.i.g.n.a.
0xfd04740075007200650020006e006f007400t.u.r.e. .n.o.t.
⋯11 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.